How does the HTTPS protocol work?

by | Mar 5, 2017 | CCNA, CCNP, CompTIA, Encryption, Malware Prevention, Security Fundamentals

Nowadays, many servers rely on HTTPS. It is used in secure banking transactions as well as for browsing. What is HTTPS and how is HTTPS more secure than HTTP? Let’s understand that in more detail.

What is HTTPS?

When we type a URL in the browser, our browser sends an HTTP request to the server, and the server responds with an appropriate HTML page. Now, HTTP is a stateless protocol. This means that every time the browser wants some data from the server, a new connection is established to the server, and the client waits. The server sends a response and closes the connection.

If we think about security, HTTP is an unsecured protocol. When data travels between the client and the server, it is unencrypted. As a result, the data is not safe from the Man-In-The-Middle attack. To address that problem, HTTPS was developed.

HTTPS basically uses SSL/TLS for security. That means that all the data transferred between a server and a client gets encrypted first and then transferred. A TLS connection is established between the server and the client, and a key is negotiated between them. And then, all data is encrypted with the key and sent over.

How does the HTTPS protocol work?

When we type a URL in the browser, our browser sends a request to connect to the server. When a server supports HTTPS, it generates a public-private key pair and keeps the keys with itself. Later, whenever it gets a connection request from a client, it sends the public key of the key pair to the client.

The client receives the public key of the server and verifies the authenticity of the server’s public key with a Certificate Authority. This step is done so that someone malicious cannot forge the public key of the server and send its public key instead.

After the public key is verified, it is time for the server and the client to negotiate a symmetric key using which they can encrypt the data and send it over. Using symmetric key encryption along with public key encryption ensures more performance and security (What is the difference between symmetric key encryption and public-key encryption?).

Here, the server and the client use the Diffie-Hellman Key Exchange Algorithm (How does the Diffie-Hellman Key Exchange Algorithm work ?) to make sure a symmetric key is negotiated between the server and the client, yet the key itself is never communicated directly between them. They use some mathematical formula instead to derive the key.

Once the symmetric key is derived, the next job is simple. Whenever any data is communicated between the …

Facebooktwitterredditpinterestlinkedinmail

Calculate the pseudoinverse of a matrix using Python

What is the pseudoinverse of a matrix? We know that if A is a square matrix with full rank, then A-1 is said to be the inverse of A if the following condition holds: $latex AA^{-1}=A^{-1}A=I $ The pseudoinverse or the Moore-Penrose inverse of a matrix is a...

Cholesky decomposition using Python

What is Cholesky decomposition? A square matrix A is said to have Cholesky decomposition if it can be written as a product of a lower triangular matrix and its conjugate transpose. $latex A=LL^{*} $ If all the entries of A are real numbers, then the conjugate...

Tensor Hadamard Product using Python

In one of our previous articles, we already discussed what the Hadamard product in linear algebra is. We discussed that if A and B are two matrices of size mxn, then the Hadamard product of A and B is another mxn matrix C such that: $latex H_{i,j}=A_{i,j} \times...

Perform tensor addition and subtraction using Python

We can use numpy nd-array to create a tensor in Python. We can use the following Python code to perform tensor addition and subtraction. import numpy A = numpy.random.randint(low=1, high=10, size=(3, 3, 3)) B = numpy.random.randint(low=1, high=10, size=(3, 3, 3)) C =...

How to create a tensor using Python?

What is a tensor? A tensor is a generalization of vectors and matrices. It is easily understood as a multidimensional array. For example, in machine learning, we can organize data in an m-way array and refer it as a data tensor. Data related to images, sounds, movies,...

How to combine NumPy arrays using horizontal stack?

We can use the hstack() function from the numpy module to combine two or more NumPy arrays horizontally. For example, we can use the following Python code to combine three NumPy arrays horizontally. import numpy A = numpy.array([[1, 2, 3], [4, 5, 6], [7, 8, 9]]) B =...

How to combine NumPy arrays using vertical stack?

Let’s say we have two or more NumPy arrays. We can combine these NumPy arrays vertically using the vstack() function from the numpy module. For example, we can use the following Python code to combine three NumPy arrays vertically. import numpy A = numpy.array([[1, 2,...

Singular Value Decomposition (SVD) using Python

What is Singular Value Decomposition (SVD)? Let A be an mxn rectangular matrix. Using Singular Value Decomposition (SVD), we can decompose the matrix A in the following way: $latex A_{m \times n}=U_{m \times m}S_{m \times n}V_{n \times n}^T $ Here, U is an mxm matrix....

Eigen decomposition of a square matrix using Python

Let A be a square matrix. Let’s say A has k eigenvalues λ1, λ2, ... λk. And the corresponding eigenvectors are X1, X2, ... Xk. $latex X_1=\begin{bmatrix} x_{11} \\ x_{21} \\ x_{31} \\ ... \\ x_{k1} \end{bmatrix} \\ X_2=\begin{bmatrix} x_{12} \\ x_{22} \\ x_{32} \\ ......

How to calculate eigenvalues and eigenvectors using Python?

In our previous article, we discussed what eigen values and eigenvectors of a square matrix are and how we can calculate the eigenvalues and eigenvectors of a square matrix mathematically. We discussed that if A is a square matrix, then $latex (A- \lambda I) \vec{u}=0...

Amrita Mitra

Author

Ms. Amrita Mitra is an author, who has authored the books “Cryptography And Public Key Infrastructure“, “Web Application Vulnerabilities And Prevention“, “A Guide To Cyber Security” and “Phishing: Detection, Analysis And Prevention“. She is also the founder of Asigosec Technologies, the company that owns The Security Buddy.

0 Comments

Submit a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Not a premium member yet?

Please follow the link below to buy The Security Buddy Premium Membership.

Featured Posts

Translate »