Lesson 7 +15 XP

HTTPS, SSL/TLS, and Public Wi-Fi Security

Whenever you browse the internet, your web traffic travels across dozens of routers and switches. Without encryption, anyone along that path can read your data.

HTTP vs HTTPS

  • HTTP (Unencrypted): Plain text. Anyone on your local Wi-Fi router (or ISP) can read passwords, session cookies, and messages (Man-in-the-Middle attack).
  • HTTPS (Encrypted with SSL/TLS): Encrypts data between your browser and the web server. Represented by the padlock icon in your browser address bar.

Unencrypted HTTP: [Browser] - - "password123" - -> [Server]  (Readable by network snoops)
Encrypted HTTPS:   [Browser] - - "e8f9a2#$!..." - -> [Server]  (Scrambled ciphertext)

Public Wi-Fi Dangers

Open Wi-Fi networks in coffee shops, airports, and hotels allow attackers to set up fake access points (e.g., "Free_Coffee_WiFi") to inspect unencrypted traffic or attempt downgrade attacks. Always ensure websites use HTTPS!