Which statement correctly differentiates HTTP and HTTPS?

Which statement correctly differentiates HTTP and HTTPS?

• A. HTTP is encrypted by TLS/SSL, HTTPS is not.
• B. HTTPS adds TLS/SSL encryption to protect data in transit; HTTP is unencrypted.
• C. HTTPS encrypts only server data, not client data.
• D. HTTP uses TLS/SSL encryption for device authentication.

Answer: (B)

HTTPS builds on HTTP by adding TLS/SSL encryption to protect data in transit. That secure layer wraps the entire connection between your browser and the server, so the bytes you send and receive are encrypted, protecting them from eavesdroppers. It also provides integrity (data can’t be tampered with unnoticed) and authentication (you can verify you’re connecting to the real server via its certificate). In contrast, plain HTTP transmits data in plaintext, so sensitive information like passwords and cookies can be read or altered if intercepted. The other statements misstate TLS: HTTPS uses TLS/SSL to secure the connection, not just server data, and TLS authentication is about verifying the server (and optionally the client) rather than device authentication in general.

HTTPS builds on HTTP by adding TLS/SSL encryption to protect data in transit. That secure layer wraps the entire connection between your browser and the server, so the bytes you send and receive are encrypted, protecting them from eavesdroppers. It also provides integrity (data can’t be tampered with unnoticed) and authentication (you can verify you’re connecting to the real server via its certificate). In contrast, plain HTTP transmits data in plaintext, so sensitive information like passwords and cookies can be read or altered if intercepted. The other statements misstate TLS: HTTPS uses TLS/SSL to secure the connection, not just server data, and TLS authentication is about verifying the server (and optionally the client) rather than device authentication in general.