I never quite paid attention to why we need HTTPS connections. I knew it is a secure connection, but that's about it. I never thought why we need a secure connection, or why the normal HTTP connection was a problem in the first place.
Well, when someone has access to data you send over the network, he can read raw data and re-assemble the data which could be sensitive. Suppose you are on a wifi network, and someone on the same network uses a packet capturing software, he can easily see your data sent over the network. Same is the case with wired connections, but it is far more difficult to capture packets on a wired connection.
Now, suppose you are using a traditional HTTP connection, all your data is raw data. If you encrypt it using HTTPS, the eavesdropper can still capture your data, but it wont be of much use to him, since it is encrypted.
Hence, public wifi networks warn you before logging in to their networks, saying "this network does not use a secure connection, your data may be visible to others". These public networks do no generally have passwords, and hence, the warning.
Most websites today have HTTPS connections, like banking websites, and social networking sites. Check FB and BOA.
Other options include VPN, etc which I am not totally familiar with.
Well, when someone has access to data you send over the network, he can read raw data and re-assemble the data which could be sensitive. Suppose you are on a wifi network, and someone on the same network uses a packet capturing software, he can easily see your data sent over the network. Same is the case with wired connections, but it is far more difficult to capture packets on a wired connection.
Now, suppose you are using a traditional HTTP connection, all your data is raw data. If you encrypt it using HTTPS, the eavesdropper can still capture your data, but it wont be of much use to him, since it is encrypted.
Hence, public wifi networks warn you before logging in to their networks, saying "this network does not use a secure connection, your data may be visible to others". These public networks do no generally have passwords, and hence, the warning.
Most websites today have HTTPS connections, like banking websites, and social networking sites. Check FB and BOA.
Other options include VPN, etc which I am not totally familiar with.