Your Web News in One Place

Help Webnuz

Referal links:

Sign up for GreenGeeks web hosting
December 21, 2022 02:05 am GMT

Understand difference between HTTP and HTTPs

Introduction

In this we will see what will be the practical difference between http and https.

Procedure

Wireshark tool is used to capture the TCP packets and examine them.
There are two websites:-
1- (https disabled) 192.102.104.3

2- (https enabled)192.102.104.4

We will try to put our username:-bee and password:-bug in both the websites and examine each TCP packets.
Now i had to setup Wireshark to capture the packets as we put the username, password and click on Login.
Then the Wireshark catch this packet.
First lets examine the HTTP websites TCP packet but flowing the TCP stream.

By analysing the TCP/HTTP packet, we can see that the username and password are in text format.

Now we will put the same credentials in the https enabled website(192.102.104.4) and analyse the packet.

The whole HTTP/TCP packet is encrypted and none information is shared including the username and password.

Conclusion

This explains technically that using https enabled websites are better than using https disabled ones.
This experiment was done in ine.com website's pen-testing student course's lab


Original Link: https://dev.to/aksrao1998/understand-difference-between-http-and-https-17ah

Share this article:    Share on Facebook
View Full Article

Dev To

An online community for sharing and discovering great ideas, having debates, and making friends

More About this Source Visit Dev To