{"id":4250153,"date":"2021-04-01T10:14:08","date_gmt":"2021-04-01T08:14:08","guid":{"rendered":"https:\/\/www.deptagency.com\/insight\/the-dangers-of-non-secure-http\/"},"modified":"2017-09-18T13:06:49","modified_gmt":"2017-09-18T11:06:49","slug":"the-dangers-of-non-secure-http","status":"publish","type":"article","link":"https:\/\/www.deptagency.com\/en-nl\/insight\/the-dangers-of-non-secure-http\/","title":{"rendered":"The dangers of non-secure HTTP"},"content":{"rendered":"
\n\t\n\t<\/svg>\n\t\t\t\n\t\t\tBack to all articles\t\t<\/span>\n\t\n<\/button>\n\t\tThe dangers of non-secure HTTP\t<\/h1>\n\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t<\/picture>\n\t\n\t<\/div>
\n\t\t\t\n\t\n\t
\n\t\tJames Simm\t\t
\n\t\tHead of Engineering\n\t\t\t<\/div>\n<\/div>\n\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\tDate\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t1 April 2021\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t<\/div>\n<\/div>\n\n
\n\t
\n\t\t\n\t\t\t\t\t
\n\t\t\t\t\n\n\t\tHTTP \u2013 Hypertext Transfer Protocol \u2013 allows communication between systems. Most commonly, it is used for transferring data from a web server to a browser, to allow us to view web pages.\t<\/h2>\n\n\n\t\tYou\u2019ve seen the Secure HTTPS before; a padlock icon in the address bar, or maybe an encrypted website connection \u2013 it\u2019s displayed as a number of things. Originally it was reserved primarily for passwords and other sensitive data. The question now is: Why move to HTTPS? What\u2019s the big deal?\t<\/p>\n\n\n\t\tWhy HTTPS?\t<\/h2>\n\n\n\t\tThe problem is that HTTP data is not encrypted, so can be intercepted by third parties to gather data passed between the two systems. This can be addressed by using a secure version called HTTPS, where the S stands for Secure. It involves the use of an SSL (Secure Sockets Layer) certificate, which creates a secure encrypted connection between the web server and the web browser.\t<\/p>\n\n\n\t\tA tidbit of useful information for those who don\u2019t understand the difference between HTTP and HTTPS. The S indicates that a layer of security (encryption) has been added to the page. Browsers often add a small padlock icon near the address bar to highlight this.\t<\/p>\n\n\n\t\tWithout HTTPS, any data passed is insecure. This is especially important for sites where sensitive data is passed across the connection, such as eCommerce sites that accept online card payments, or login areas that require users to enter their credentials. There are currently three different kinds of HTTPS certificates.
\t<\/p>\n\n\n\t\tOk \u2013 What kind of HTTPS certificate should I get for my site?\t<\/h2>\n\n\n\t\tGood question. It\u2019s a significant question to answer before purchasing the HTTPS certificate for your website. The certificate has\u00a0three different types<\/a>:\t<\/p>\n\n\n\t\tDomain validation\t<\/h2>\n\n\n\t\tFor Domain Validation (DV), the\u00a0Certificate Authority<\/a>\u00a0will check on the applicant to use a specific domain name. No company identity information is required. The details are not to be displayed, other than encryption information within the Secure Site Seal. However, while you\u2019re thinking that your information is safe, you may not know who is truly handling the information at the other end.
\t<\/p>\n\n\n\t\tOrganisation validation\t<\/h2>\n\n\n\t\tFor an Organisation Validation (OV) certificate, the Certificate Authority performs a much more essential validation process. This involves checking the applicant\u2019s business credentials and making sure that the company\u2019s physical address matches the application, e.g. they would be checking a company registration to ensure it\u2019s correct.\t<\/p>\n\n\n\t\tAny website protected by an OV SSL Certificate displays a small padlock and HTTPS prefix in the visitor\u2019s browser bar. Actually, it\u2019s not as eye-catching as the Extended Validation Certificate green bar.\t<\/p>\n\n\n\t\tExtended validation\t<\/h2>\n\n\n\t\tExtended Validation (EV) is one of the highest standards of SSL Certificate available. It uses the same powerful encryption as other SSLs, but this one requires the vetting of the applicant\u2019s business. Only those businesses that pass the process will receive an EV SSL Certificate. Anyone who sees the green address bar while on your site would immediately recognise it\u2019s safe to use the site for browsing for products or sharing sensitive data e.g. Amazon.\t<\/p>\n\n\n\t\tAny businesses that sell products or accept payment information online should use an Extended Validation SSL Certificate.

\t<\/p>\n\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\t