> For the complete documentation index, see [llms.txt](https://bharat-tiwari.gitbook.io/our-tech-journal/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://bharat-tiwari.gitbook.io/our-tech-journal/web/http-https.md).

# http / https

HTTP data is not encrypted, it can be intercepted by third parties to gather data being passed between the two systems.

when a website uses HTTPS, it means the data sent over the web is ***encrypted*** and cannot be misused by third parties

To implement HTTPS, a web site needs to purchase **SSL** certificate (Secure Socket Layer) that sets up a secure encrypted connection between server and client

## How servers implement HTTPS

<< to do - link a resource that explains https and its implementation >>