https vs http, what is the difference?

Ye' old general discussion board. Basically, for everything that isn't covered elsewhere. Come here to shoot the breeze, shoot your mouth off, or whatever suits your fancy.
This forum is not for asking programming related questions.

Moderator: General Moderators

Post Reply
crazytopu
Forum Contributor
Posts: 259
Joined: Fri Nov 07, 2003 12:43 pm
Location: London, UK
Contact:

https vs http, what is the difference?

Post by crazytopu »

One of my clients is asking if it is more secure if we use https rather than http protocol. As I am aware of it comes handy when your site is processing payment. But for my client I am using paypal to accept payment which means the members are sent to paypal for payment processing and once they make payment they are sent back to the site. Therefore,security is not a big issue for my client's site. Right?

Can anyone tell me more if you know.
User avatar
Luke
The Ninja Space Mod
Posts: 6424
Joined: Fri Aug 05, 2005 1:53 pm
Location: Paradise, CA

Post by Luke »

Last edited by Luke on Thu Mar 22, 2007 3:57 pm, edited 1 time in total.
crazytopu
Forum Contributor
Posts: 259
Joined: Fri Nov 07, 2003 12:43 pm
Location: London, UK
Contact:

Post by crazytopu »

The link doesnot work, but I read something on wiki
User avatar
Luke
The Ninja Space Mod
Posts: 6424
Joined: Fri Aug 05, 2005 1:53 pm
Location: Paradise, CA

Post by Luke »

fixed
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

What on Earth does this thread have to do with Graphics?
crazytopu
Forum Contributor
Posts: 259
Joined: Fri Nov 07, 2003 12:43 pm
Location: London, UK
Contact:

Post by crazytopu »

I am sooo sorry Fyed, that was a complete mismatch, I thought i selected General forum...

I am really sorry.
User avatar
Kieran Huggins
DevNet Master
Posts: 3635
Joined: Wed Dec 06, 2006 4:14 pm
Location: Toronto, Canada
Contact:

Post by Kieran Huggins »

I don't bother with HTTPS when I use paypal as a gateway
User avatar
RobertGonzalez
Site Administrator
Posts: 14293
Joined: Tue Sep 09, 2003 6:04 pm
Location: Fremont, CA, USA

Post by RobertGonzalez »

If any information is passed to your server at all before it gets to the processor, you need HTTPS. I won't even consider entering any personal information into a web form if it is not HTTPS.
crazytopu
Forum Contributor
Posts: 259
Joined: Fri Nov 07, 2003 12:43 pm
Location: London, UK
Contact:

Post by crazytopu »

You mean not even your name and address, phone no?

Why is that? how it is relevant with a secure site when you are not entering any payment information.
I am going to show this post to my client and based on your input he will decide wheather to go for https or http.

So a little clarification will help a lot.
User avatar
RobertGonzalez
Site Administrator
Posts: 14293
Joined: Tue Sep 09, 2003 6:04 pm
Location: Fremont, CA, USA

Post by RobertGonzalez »

Name and address information can be used to spoof identities. I will, on ocassion, enter my email address and name, but seldom will I enter personal contact information on a site unless I know for sure that the site is trustworthy (under my management, run by someone I know, run by a company with a secure history). Under no circumstance will I enter vitals (SSN, CC data, etc) on a site that is not HTTPS.
alvinphp
Forum Contributor
Posts: 380
Joined: Wed Sep 21, 2005 11:47 am

Post by alvinphp »

HTTPS is much more secure. I recommend you try it once because it is easy to setup and you will then have a much better idea of how it works.
Post Reply