HTTP为什么不安全？HTTP安全漏洞 Why is HTTP not secure? HTTP Security Gaps

HTTP requests and responses are sent in plaintext, which means that anyone can read them. 

HTTP方式的请求和响应都是在明文下传输的，这就意味着任何人都可以读取它们的内容。

HTTP与HTTPS比较，不同之处有哪些？ HTTP vs. HTTPS: What are the differences?

HTTPS is HTTP with encryption. The only difference between the two protocols is that HTTPS uses TLS (SSL) to encrypt normal HTTP requests and responses. As a result, HTTPS is far more secure than HTTP. A website that uses HTTP has http:// in its URL, while a website that uses HTTPS has https://.

HTTPS方式是HTTP的方式上加上加密，唯一的区别就是HTTPS方式使用SSL/TLS对正常的HTTP请求和响应进行了加密。结果就是，HTTPS方式比HTTP更安全。使用HTTP方式访问的网站的URL前缀是http://，而相对的HTTPS的则是以https://开头。

 

What is HTTP?

HTTP stands for Hypertext Transfer Protocol, and it is a protocol – or a prescribed order and syntax for presenting information – used for transferring data over a network. Most information that is sent over the Internet, including website content and API calls, uses the HTTP protocol. There are two main kinds of HTTP messages: requests and responses.

HTTP意为超文本传输协议，它是一个用于在网络上传输数据的协议，或一个根据预定顺序的一种语法，为的是传输展示信息的。大多数在网络上的数据是以HTTP方式传输，包括网站内容和API调用。HTTP有两种消息，请求和响应。

In the OSI model， HTTP is a layer 7 protocol.

在OSI模型中，HTTP拥有7层。

什么是HTTP请求？什么是HTTP响应？ What is an HTTP request? What is an HTTP response?

HTTP requests are generated by a user's browser as the user