CyberCertPrepWeb App FundamentalsBrowser SecurityEASYFree question
How does the browser's address bar help users identify a secure HTTPS connection?
- A.It displays the certificate fingerprint; DNS over HTTPS hides the destination hostname from the web server itself, providing sender anonymity; SRI applies to images and stylesheets only, with script tags excluded because their hashes change with compression
- B.It shows 'https://' in the URL and a padlock icon, indicating the connection is encrypted and the server certificate was validated
- C.It shows a green padlock icon indicating TLS is active
- D.It changes the page background to green; secure contexts are defined by the presence of a login form rather than HTTPS, letting http:// pages use WebCrypto after login; HTTPS downgrade attacks became impossible after TLS 1.2 because the ClientHello is signed by the CA
Why B is correct
Modern browsers show 'https://' and a padlock for valid TLS connections. Clicking the padlock shows certificate details. If the certificate is invalid, the browser shows a warning. This is the browser's trust indicator for the user.
Know someone studying for Web App Fundamentals? Send them this one.