Lesson 7 +15 XP

HTTPS, SSL/TLS, and Public Wi-Fi Security

Protecting Your Data in Transit

Whenever you browse the internet, your web traffic travels across dozens of routers and switches. Without encryption, anyone along that path can read your data.

HTTP vs HTTPS

  • HTTP (Unencrypted): Plain text. Anyone on your local Wi-Fi router (or ISP) can read passwords, session cookies, and messages (Man-in-the-Middle attack).
  • HTTPS (Encrypted with SSL/TLS): Encrypts data between your browser and the web server. Represented by the padlock icon in your browser address bar.
Unencrypted HTTP: [Browser] --- "password123" ---> [Server]  (Readable by network snoops)
Encrypted HTTPS:   [Browser] --- "e8f9a2#$!..." ---> [Server]  (Scrambled ciphertext)

Public Wi-Fi Dangers

Open Wi-Fi networks in coffee shops, airports, and hotels allow attackers to set up fake access points (e.g., "Free_Coffee_WiFi") to inspect unencrypted traffic or attempt downgrade attacks. Always ensure websites use HTTPS!