Tuesday, April 7, 2009

How to tell if a website is truly secure or not

Someone sent me an email with some very useful information that I wanted to share with you all about the difference between http:// and https://

This is one of the ways that you can check whether a website that you are about to enter your credit card details into for example, is secure or not! So it’s this simple:

The main difference between http:// and https:// is it’s all about keeping you secure

HTTP stands for Hypertext Transport Protocol, which is just a fancy way of saying it's a protocol (a language, in a manner of speaking) for information to be passed back and forth between web servers and clients.

The important thing is the letter S which makes the difference between HTTP and HTTPS.
The S stands for "Secure".

If you visit a website or webpage, and look at the address in the web browser, it will likely begin with the following: http://

This means that the website is talking to your browser using the regular 'unsecured language. In other words, it is possible for someone to "eavesdrop" on your computer's conversation with the website. If you fill out a form on the website, someone might see the information you send to that site.

This is why you never ever enter your credit card number in an http website!

But if the web address begins with https:// that basically means your computer is talking to the website in a secure code that no one can eavesdrop on.

If a website ever asks you to enter your credit card information, you should automatically look to see if the web address begins with https://

If it doesn't, do not enter sensitive information like a credit card number.

You can also see the Wikipedia article on the subject