What are the differences between data interception methods in HTTP and HTTPS protocols?

The main difference between data interception methods in HTTP and HTTPS is related to security level and encryption.

• HTTP is a protocol without encryption. Data interception (for example, using a sniffer) allows capturing all traffic in plain text, including headers and request body.

• HTTPS is HTTP over TLS/SSL, where data is encrypted. When intercepting traffic without access to encryption keys, the content remains encrypted and unreadable.

Therefore, to intercept and analyze HTTPS traffic, it is usually necessary to:

• Use MITM attacks with certificate substitution (for example, through a proxy with a trusted certificate) to decrypt the traffic.
• Or have access to the server's private keys.

Unlike HTTP, where simply listening to the network suffices, HTTPS requires additional efforts for decryption and data analysis.