This content originally appeared on DEV Community 👩‍💻👨‍💻 and was authored by Akshay Rao
Introduction
In this we will see what will be the practical difference between http and https.
Procedure
Wireshark tool is used to capture the TCP packets and examine them.
There are two websites:-
1- (https disabled) 192.102.104.3
2- (https enabled)192.102.104.4
We will try to put our username:-bee and password:-bug in both the websites and examine each TCP packets.
Now i had to setup Wireshark to capture the packets as we put the username, password and click on Login.
Then the Wireshark catch this packet.
First let’s examine the HTTP website’s TCP packet but flowing the TCP stream.
By analysing the TCP/HTTP packet, we can see that the username and password are in text format.
Now we will put the same credentials in the https enabled website(192.102.104.4) and analyse the packet.
The whole HTTP/TCP packet is encrypted and none information is shared including the username and password.
Conclusion
This explains technically that using https enabled websites are better than using https disabled ones.
This experiment was done in ine.com website's pen-testing student course's lab
This content originally appeared on DEV Community 👩‍💻👨‍💻 and was authored by Akshay Rao
Akshay Rao | Sciencx (2022-12-21T02:05:47+00:00) Understand difference between HTTP and HTTPs. Retrieved from https://www.scien.cx/2022/12/21/understand-difference-between-http-and-https/
Please log in to upload a file.
There are no updates yet.
Click the Upload button above to add an update.