webmuss
New member
- Joined
- Nov 14, 2018
- Messages
- 19
- Points
- 3
HTTPS is well-known HTTP+SSL, a client and a server communicate to each other, but through an SSL, that encrypts and decrypts their requests and responses.
Basically SSL certificates encrypt the data that goes from your computer to the target website and back:
Your browser connects server (your target website) on a SSL port;
Server sends back its public key;the client(your browser) decides if it’s ok to proceed - it checks if the public key isnt expired, and if it is verified or "signed" by a trusted third party Certificate Authority, whose job is to verify server application for a digital SSL certificate;
If the client decides to trust the certificate, it sends his public key to the server;
Then the server creates the encrypted message, using client’s public key and server’s private key, and send the message back to the browser;
Client’s browser decrypts the message;
Now the client and the server has established secure connection.
Basically SSL certificates encrypt the data that goes from your computer to the target website and back:
Your browser connects server (your target website) on a SSL port;
Server sends back its public key;the client(your browser) decides if it’s ok to proceed - it checks if the public key isnt expired, and if it is verified or "signed" by a trusted third party Certificate Authority, whose job is to verify server application for a digital SSL certificate;
If the client decides to trust the certificate, it sends his public key to the server;
Then the server creates the encrypted message, using client’s public key and server’s private key, and send the message back to the browser;
Client’s browser decrypts the message;
Now the client and the server has established secure connection.