https vs http, what is the difference?
Moderator: General Moderators
-
crazytopu
- Forum Contributor
- Posts: 259
- Joined: Fri Nov 07, 2003 12:43 pm
- Location: London, UK
- Contact:
https vs http, what is the difference?
One of my clients is asking if it is more secure if we use https rather than http protocol. As I am aware of it comes handy when your site is processing payment. But for my client I am using paypal to accept payment which means the members are sent to paypal for payment processing and once they make payment they are sent back to the site. Therefore,security is not a big issue for my client's site. Right?
Can anyone tell me more if you know.
Can anyone tell me more if you know.
Last edited by Luke on Thu Mar 22, 2007 3:57 pm, edited 1 time in total.
- Kieran Huggins
- DevNet Master
- Posts: 3635
- Joined: Wed Dec 06, 2006 4:14 pm
- Location: Toronto, Canada
- Contact:
- RobertGonzalez
- Site Administrator
- Posts: 14293
- Joined: Tue Sep 09, 2003 6:04 pm
- Location: Fremont, CA, USA
-
crazytopu
- Forum Contributor
- Posts: 259
- Joined: Fri Nov 07, 2003 12:43 pm
- Location: London, UK
- Contact:
You mean not even your name and address, phone no?
Why is that? how it is relevant with a secure site when you are not entering any payment information.
I am going to show this post to my client and based on your input he will decide wheather to go for https or http.
So a little clarification will help a lot.
Why is that? how it is relevant with a secure site when you are not entering any payment information.
I am going to show this post to my client and based on your input he will decide wheather to go for https or http.
So a little clarification will help a lot.
- RobertGonzalez
- Site Administrator
- Posts: 14293
- Joined: Tue Sep 09, 2003 6:04 pm
- Location: Fremont, CA, USA
Name and address information can be used to spoof identities. I will, on ocassion, enter my email address and name, but seldom will I enter personal contact information on a site unless I know for sure that the site is trustworthy (under my management, run by someone I know, run by a company with a secure history). Under no circumstance will I enter vitals (SSN, CC data, etc) on a site that is not HTTPS.