Why are some websites http and some https? A difference of one second makes a big difference.

When users open Taobao, Baidu, Zhihu and other major platforms, there will be an https:// in front of the URL. When it is changed to http://, the URL can be opened normally, and an "s" is automatically added. When we visit some personal blogs, the URL shows http:// in front of the URL. When we change http:// to https://, the URL cannot be opened normally.

Both provide platforms and services to users, so why are some using https:// and others using http://? Just an "s" difference, what's the difference? It can be said that there is a world of difference.

[[377460]]

One "s" difference

The reason for the difference of "s" is that the website is configured with SSL certificate. As long as the website is configured with SSL certificate, then http:// will become https://. So what is SSL certificate?

This is a digital certificate, an encryption technology used to establish an encrypted link between a web server and a browser and client. By configuring and applying an SSL certificate to enable the HTTPS protocol, the security of Internet data transmission is ensured.

To put it simply, URLs with https:// will be encrypted. When you visit a website, both your login information and personal information will be encrypted. It is almost impossible for others to eavesdrop on your personal information or the information sent to you by the website through technical means.

In addition, when users exchange data with websites, it will not be tampered with by others. The website receives the data sent by the user. The identity of the website can also be easily identified by the user. The user knows that the website he is visiting is a website he wants to visit, not a phishing website.

The Power of SSL Certificates

Don't underestimate the "s" in this certificate. A well-known website spends tens of thousands of yuan on SSL certificates every year. The reason why many websites are willing to spend so much money is that this kind of digital certificate can provide high value for the website. So, what is the use of SSL certificates?

1. Ensure website security

When a website is configured with an SSL certificate, the user's web browser will generate a unique "session key code" to encrypt all communications between the user and the website, making them impossible to be eavesdropped on.

It is a bit like the telegram encryption method used by various countries during World War II. First, a code book is designed, and army A sends a telegram to army B. To outsiders, it looks random and disorganized, and they have no idea what it means. But as long as army B gets the telegram and compares it with the code book, they can restore the telegram information and understand the other party's intentions.

In this way, the security of the website is guaranteed, thereby avoiding information leakage and the risk of violating national laws.

2. Distinguish the true from the false

After configuring the SSL certificate, the website will get a "green lock" logo, which will let users know that the website is genuine. This is very helpful for enterprises to establish brand image and build user trust. It can also help users identify phishing websites and avoid losses.

3. Anti-traffic hijacking

Traffic hijacking, for example, when you enter the Baidu domain name, it opens the Google website. Hackers will use various malware and Trojans to modify the browser, and force users to visit certain websites by locking the homepage, popping up windows, etc., thus causing loss of user traffic.

Once a website's traffic is hijacked, hackers can easily obtain various passwords and personal information, and can even implant passwords and steal personal property.

When a website is configured with an SSL certificate, the identity of the server will be authenticated. Therefore, when traffic hijacking occurs, resulting in a connection to the wrong server, the process will automatically terminate the connection, ultimately making traffic hijacking impossible.

[[377462]]

4. Priority inclusion

August 2014: Google announced that it would give priority to indexing and ranking HTTPS websites; March 2015: Baidu enforced HTTPS connections for the entire site; search engines are the main traffic entrance for most websites, so enabling https is an inevitable trend.

The industry attaches great importance to https

Nowadays, it is rare to see pure http websites. This is because with the development of the Internet, network security has received more and more attention. In 2015, Alibaba announced that all its e-commerce platforms would enable https; in 2017, WeChat mini-programs announced that they must use https.

In terms of browser security requirements, if the website is not https, it will be directly marked as [unsafe]. In terms of laws and regulations, the British and American governments required in 2016 that all government business platforms must use https.

Maybe we will never see http sites again, but it is a good thing for network security. Internet security is no small matter. A small "s" has a lot of implications. Do you understand the mystery?