Why should websites use HTTPS instead of HTTP?
- A.HTTPS encrypts data transmitted between the browser and server, protecting it from eavesdropping
- B.HTTPS is required for all websites by law; HTTPS protects against a compromised application backend
- C.HTTPS makes websites load faster
- D.HTTPS prevents all types of cyberattacks; HTTP strict transport security downgrades connections to plain HTTP
Why A is correct
HTTPS uses TLS encryption to protect data in transit between the user's browser and the web server. Without HTTPS, data (including passwords and personal information) is sent in plaintext and can be intercepted by anyone on the network. HTTPS also verifies the server's identity through digital certificates.
Know someone studying for Security Fundamentals? Send them this one.