What is HTTPS? How does it differ from HTTP? How does it protect against 'man-in-the-middle' attacks?

HTTPS (HyperText Transfer Protocol Secure) is an extension of the HTTP protocol that provides a secure encrypted connection between the client and the server.

Differences between HTTPS and HTTP:

• HTTPS uses TLS (or previously SSL) for encrypting data transmitted over the network.
• HTTP transmits data in plain text, making it vulnerable to interception and modification.

How HTTPS protects against "man-in-the-middle" (MITM) attacks:

• When establishing an HTTPS connection, a TLS handshake occurs, during which the client verifies the server's authenticity using a digital certificate issued by a trusted certification authority (CA).
• If the certificate is valid and matches the expected domain, an encrypted channel is established.
• Encryption ensures that data cannot be read or altered by an attacker, even if they intercept the traffic.
• Certificate verification prevents server impersonation by an attacker.

Thus, HTTPS ensures confidentiality, integrity, and authentication of the connection, protecting against MITM attacks.