HTTP — unencrypted. HTTPS — encrypted (HTTP + TLS).
HTTP:
HTTP:
Client → Request (plain text) → Server
Anyone can read the data
HTTPS:
HTTPS:
Client → Request (encrypted) → Server
TLS handshake → Key exchange → Encrypted data
Only endpoints can read data
Benefits of HTTPS: