HTTP and HTTPS are two different protocols with HTTPS being newer and using a better security standard. HTTP doesnt encrypt while HTTPS does. This basically means if you have someone in your network that listens with a program like wireshark to what you’re doing , they’ll see in clear text whats being sent and received, unless theres another layer of encryption to the service.
This means they could potentially see your passwords, bank-account information or anything else you access using HTTP (no banks uses HTTP though)
For a site to support HTTPS it will however need an license and to have these validate will cost a bit of money for the company that owns the service you’re trying to access, most sites converted to HTTPS by now though and if it doesn’t set it as HTTPS as standard you should just avoid it
Latest Answers