CODEWITHSUNDEEP
https
user1648142
user1648142

Reputation:

Why should we use HTTPS?

I have learned a little about https, but was not clear why it is needed.

What if I encrypt the data using the most powerful algorithms like RSA instead of sending through a HTTPS zone? Can someone explain with a few reasons why we need https?

Upvotes: 0

Views: 600

Answers (3)

martinstoeckli
martinstoeckli

Reputation: 24081

You could indeed encrypt the data by yourself, but you will face a big problem: The encrypting code must be available on the server as well as on the client (normally the browser).

Implementing the encryption on the server can be done securely. On the client side you can either install a software (plugin), or you can send JavaScript to the client. The problem is: how do you get the encrypting code to the client? Everybody evesdropping, will get the javascript code as well, so he can do the same things as the client will be able to do.

Instead of forcing the user to install a plugin, you can use the built-in support for SSL, every browser understands this protocol already. You could think of it, as an already installed plugin for encryption.

Upvotes: 0

Miljen Mikic
Miljen Mikic

Reputation: 15241

What if I encrypt the data using the most powerful algorithms like RSA instead of sending through a HTTPS zone?

You will have to implement all by yourself, i.e. reinvent the wheel. HTTPS is by default supported in every browser.

Can someone explain with a few reasons why we need https?

Secure communication that is widely supported. If you have in the middle of communication someone with sniffer tool like Wireshark, he/she will be able to see all packets that you and your peer exchange. Try to catch the HTTPS communication, you won't be able to see anything meaningful in the body of the request.

Upvotes: 0

Can't Tell
Can't Tell

Reputation: 13426

On the Wikipedia article it says

Technically, it is not a protocol in itself; rather, it is the result of simply layering the Hypertext Transfer Protocol (HTTP) on top of the SSL/TLS protocol

On the SSL/TLS article on Wikipeida,

TLS and SSL encrypt the segments of network connections at the Application Layer for the Transport Layer, using asymmetric cryptography for key exchange, symmetric encryption for confidentiality, and message authentication codes for message integrity.

So the key exchange does use asymmetric cryptography and RSA is an asymmetric cryptography algorithm.

After key exchange has been performed in a secure manner further communication can be done through symmetric cryptographic algorithms. The reasoning behind using both symmetric and asymmetric algorithms can be found here.

Upvotes: 1

Related Questions