What is HTTPS? How Secure is it today? How can its Security be Improved?

[JMH]

As the World Wide Web takes on more and more enormous importance in our modern life, the security issues become of the most immediate interest now. The risk of personal information pilfering is constantly increasing. In this regard, such terms as antiviruses and brandmauers are no more strange being widely used. Most people realize that private data such as personal correspondence, account details, passport and phone numbers should be transmitted via secured connection to eliminate or, at least, reduce the loss of valuable information. This article is concerned with HTTPS constituting one of the most popular protocols for ensuring data transmission security.

Introduction

Our intention is to give you an up-close look at HTTPS. The article is structured as follows: Firstly, we will pay attention to HTTPS functional method. The HyperText Protocol Secure provides a safe channel for confidential information exchange. The principle of operation lies in data cryptography and authentication validation.
Secondly, we will consider SSL and TSL cryptographic protocols which ensure communication security over the Internet. Our goal is to define the basic features and primary tasks of SSL and TLS cryptographic protocols. In addition, we will state the main differences of both protocols in order to understand their functionalities better.

http://mintywhite.com/more/software...campaign=Feed:+WindowsGuides+(Windows+Guides)

 

[Laxer]

SSL certificates can easily be spoofed...

HTTPs if used properly is great however do not put your bottom dollar on it keeping secure...

 

[tom982]

SSL was busted last year: http://www.theregister.co.uk/2011/09/19/beast_exploits_paypal_ssl/

There's other tools targetting the use of SSL on wireless networks: http://www.thoughtcrime.org/software/sslstrip/

Unfortunately, the list goes on.

 

[jcgriff2]

I've seen a few forums recently using HTTPS.

Don't know exactly what security it adds.

 

[Laxer]

More or less it CAN mean all communication with the server is encrypted andt using SSL...

However this more than often isn't the case