Sunday, November 11, 2007

HTTP:// vs HTTPS://

.
I received this email from a friend here in Bangkok a few days back.
I found the information provided very useful and thought of sharing it with all who visit this blog.
As I am not very good with the cyber world I don't know if the information provided is all correct, so if you are visiting and are good with the computer world, I would appreciate it if you could leave a comment and enlighten me.
.
HTTP:// vs HTTPS://
.
What is the difference between http:// & https:// ?
It's all about keeping you secure.
.
HTTP stands for HyperText Transport Protocol, which is just a fancy way of saying it's a protocol (a language, in a manner of speaking) for information to be passed back and forth between web servers and clients.
.
You really don't need to know what it all stands for.
The important thing is the letter S which makes the difference between HTTP and HTTPS. The S (big surprise) stands for "Secure". You probably didn't need me to tell you that, because you already knew it had something to do with security.
.
If you visit a website or webpage, and look at the address in the web browser, it will likely begin with the following: http://. This means that the website is talking to your browser using the regular 'unsecure' language. In other words, it is possible for someone to "eavesdrop" on your computer's conversation with the website. If you fill out a form on the website, someone might see the information you send to that site.
.
This is why you never ever ever enter your credit card number in an http website!
But if the web address begins with https://, that basically means your computer is talking to the website in a secure code that no one can eavesdrop on.
.
Allow me to illustrate:
.
Hypertext Transfer Protocol (http) is a system for transmitting and receiving information across the Internet. Http serves as a request and response procedure that all agents on the Internet follow so that information can be rapidly, easily, and accurately disseminated between servers, which hold information, and clients, who are trying to access it. Http is commonly used to access html pages, but other resources can be utilized as well through http. While exchanging confidential information with a server, which needs to be secured in order to prevent unauthorized access a client needs some sort of security which is provided by https, or secure http which allows authorization and secured transactions.
.
Hypertext Transfer Protocol Secure (https) is quite similar to http, because it follows the same basic protocols. The http or https client, such as a Web browser, establishes a connection to a server on a standard port. When a server receives a request, it returns a status and a message, which may contain the requested information or indicate an error if part of the process malfunctioned. Both systems use the same Uniform Resource Identifier (URI) scheme, so that resources can be universally identified. Use of https in a URI scheme rather than http indicates that an encrypted connection is desired.
.
When using an https connection, the server responds to the initial connection by offering a list of encryption methods it supports. In response, the client selects a connection method, and the client and server exchange certificates to authenticate their identities. After this is done, both parties exchange the encrypted information after ensuring that both are using the same key, and the connection is closed. In order to host https connections, a server must have a public key certificate, which embeds key information with a verification of the key owner’s identity. Most certificates are verified by a third party so that clients are assured that the key is secure.
.
Https is used in many situations, such as log-in pages for banking, forms, corporate log ons, and other applications in which data needs to be secure. However, if not implemented properly, https is not infallible, and therefore it is extremely important for end users to be wary about accepting questionable certificates and cautious with their personal information while using the Internet.
.
You understand why this is so important, right?
If a website ever asks you to enter your credit card information, you should automatically look to see if the web address begins with https://. If it doesn't, there's no way you're going to enter sensitive information Like a credit card number!
.
HAVE A GREAT DAY

Wednesday, November 7, 2007

I C E

My friend from Kuwait mailed me this article a few months back.
I found it very useful and I think it could help many if it were practiced by all.
Hope its as useful to all who are visiting my blog.
.
..
I C E
(In Case of Emergency)
.
We all carry our mobile phones with hundreds of names/ numbers stored in its memory but yet nobody, other than ourselves, know which of these numbers belong to our near and dear ones?
.
In case we are involved in an accident or had a heart attack and the people attending us get hold of our mobile phone but don't know which number to call to inform our family members. Yes, there are many numbers stored but which one is the contact person in case of an emergency?
.
For this reason, we must have one or more telephone numbers stored under the name ICE (In case of Emergency) in our mobile phones.
.
Recently, the concept of "ICE" is catching up quickly. It is simple, an important method of contact during emergency situations.
.
As cell phones are carried by majority of the population, just store the number of a contact person or person who should be contacted at during emergency as ICE" (meaning In Case of Emergency).
.
The idea was thought up by a paramedic who found that when they went to the scenes of accidents, there were always mobile phones with patients, but they didn't know which number to call.
.
He therefore thought that it would be a good idea if there was a nationally recognized name for this purpose.
.
Following a disaster in London , the East Anglican Ambulance Service has launched a national "In case of Emergency (ICE)" campaign.
.
In an emergency situation, Emergency Service personnel and hospital staff would then be able to quickly contact your next of kin, by simply dialling the number stored as "ICE".
.
Please forward this. It won't take too many "forwards" before every body will know about this.
.
It really could save your life, or put a loved one's mind at rest.
.
For more than one contact name simply enter ICE1, ICE2 or ICE3 etc. or add a name after each ICE.
.
A great idea that will make a difference!
.
Let's spread the concept of ICE by storing an ICE number in our mobile phones today!
.
------------
.
The short message I composed and am forwarding through my mobile goes like this:
.
Imagine U R In A Life/Death Situation
I Find Yr Mobile
But Who Do I Call?
Add A Number Of A Loved One Under ICE (In Case Of Emergency)
& Make It Easier For One Who Finds U
Pass This Msg
You Never Know Who You Might Be Saving.
.
Have A Great Day