Correct option is B
HTTPS is the secure version of HTTP that runs over TLS (formerly SSL) to encrypt data between browser and server. It provides confidentiality (encryption), integrity (tamper detection) and authentication (server identity via certificates). Browsers typically show a padlock for HTTPS sites and use port 443 by default. This protects logins, payments, and any sensitive data from eavesdropping and man-in-the-middle attacks. Modern sites redirect HTTP to HTTPS to enforce security (HSTS). Hence, HTTPS expands to Hypertext Transfer Protocol Secure.
Important Key Points
1. Protocol stack: HTTP application layer carried over TLS → HTTPS.
2. Certificates: Issued by Certificate Authorities; browsers validate trust chains and domains.
3. Security properties: Encryption, integrity (MAC), and endpoint authentication.
4. Performance: TLS 1.3 reduces handshake overhead; HTTP/2 and HTTP/3 commonly ride over HTTPS.
5. Default port: 443 (vs HTTP’s 80).
6. Best practice: Use HSTS, modern ciphers and certificate transparency.
Knowledge Booster
· Why not (a) “Server”? HTTPS is a protocol, not a server type.
· Why not (c) “Scheme”? “https://” is a URL scheme name, but the acronym expands to Protocol Secure, not “Scheme.”
· Why not (d) “Storage”? HTTPS doesn’t define storage; it secures data in transit.
· Historically called “HTTP over SSL”; now standardized as HTTP over TLS.