> ## Documentation Index
> Fetch the complete documentation index at: https://programming-for-career.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# HTTP & HTTPS Basics

> A comprehensive guide to HTTP and HTTPS, covering their working principles, differences, security mechanisms, and real-world applications.

## Introduction

HyperText Transfer Protocol (HTTP) and HyperText Transfer Protocol Secure (HTTPS) are the foundation of communication on the web. They define how data is transmitted between a client (such as a web browser) and a server.

## What is HTTP?

HTTP is a protocol used for fetching resources, such as HTML documents. It serves as the foundation of data communication for the World Wide Web.

### Characteristics of HTTP:

* Stateless: Each request from a client to a server is independent.
* Plain Text Communication: Data is transmitted in an unencrypted format.
* Uses TCP (Transmission Control Protocol) at the transport layer.

```mermaid theme={null}
graph LR
A[Client] -- HTTP Request --> B[Server]
B -- HTTP Response --> A
```

## HTTP Request and Response Structure

### HTTP Request Components:

1. **Request Line** (Method, URL, HTTP Version)
2. **Headers** (Metadata about the request)
3. **Body** (Optional, used for sending data in POST requests)

Example:

```
GET /index.html HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0
Accept: text/html
```

### HTTP Response Components:

1. **Status Line** (HTTP Version, Status Code, Status Message)
2. **Headers** (Metadata about the response)
3. **Body** (The actual data requested)

Example:

```
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1234
```

## What is HTTPS?

HTTPS is the secure version of HTTP that encrypts data using SSL/TLS, preventing eavesdropping and tampering.

### How HTTPS Works:

1. **Client initiates a request** to a secure website (e.g., `https://example.com`).
2. **Server presents its SSL certificate**, verifying its identity.
3. **TLS Handshake occurs**, establishing a secure connection.
4. **Encrypted data exchange** begins.

```mermaid theme={null}
sequenceDiagram
    participant Client
    participant Server
    Client->>Server: HTTPS Request
    Server->>Client: Sends SSL Certificate
    Client->>Server: Verifies Certificate & Establishes TLS
    Server->>Client: Secure Data Transfer
```

## TCP 3-Way Handshake in HTTPS

Before HTTPS encryption begins, a **TCP 3-way handshake** establishes a reliable connection between the client and the server.

### Steps in TCP 3-Way Handshake

1. **SYN (Synchronize)** → The client sends a SYN packet to the server to start communication.
2. **SYN-ACK (Synchronize-Acknowledge)** → The server responds with a SYN-ACK packet to acknowledge the request.
3. **ACK (Acknowledge)** → The client sends an ACK packet, completing the handshake.

```mermaid theme={null}
sequenceDiagram
    participant Client
    participant Server
    Client->>Server: SYN (Request Connection)
    Server->>Client: SYN-ACK (Acknowledge & Respond)
    Client->>Server: ACK (Connection Established)
```

## Key Differences: HTTP vs. HTTPS

| Feature        | HTTP        | HTTPS                     |
| -------------- | ----------- | ------------------------- |
| Security       | Unencrypted | Encrypted via SSL/TLS     |
| Port           | 80          | 443                       |
| Data Integrity | Vulnerable  | Secured against tampering |
| SEO Ranking    | Lower       | Higher                    |

## Benefits of HTTPS

* **Data Encryption:** Protects sensitive information.
* **Authentication:** Ensures the server is legitimate.
* **Data Integrity:** Prevents data from being altered.
* **SEO Boost:** Google prioritizes HTTPS sites in rankings.

## Conclusion

Understanding HTTP and HTTPS is essential for web security. While HTTP is foundational, HTTPS ensures encrypted and secure communication, making it the standard for modern websites.