HTTPS

April 28, 2002 (webmaster)
We strongly recommend to use HTTPS for requesting web pages.

HTTPS, what is that?

The request and transmission of web pages use HTTP (= Hypertext Transfer Protocol; as http://... can be seen in the address bar in the web browser window). The whole data connection is unencrypted.

With HTTPS (= Hypertext Transfer Protocol Secure; as https://... can be seen in the address bar in the web browser window) the connection between web browser and web server is encrypted. Mostly 40 or 128 bit, depending on the encryption key strength.

Encryption, Authenticity and Integrity

Encryption (somebody intercepting the data only hears noise) as well as authenticity and integrity (it is guaranteed that the requested content really is from us and that it is not altered on its way) are two sides of cryptography. They enhance privacy, reliability and security of internet communication. Authenticity and integrity is ensured by our issued certificate (simply said).

HTTPS, quite easy

If a web server offers secure HTTPS, you can type https://... in the browser window. Nearly all web browser give you this option. Quite easy.

HTTPS, why?

Why should the request and transmission of the web pages be encrypted, the content is public?

HTTPS offers not only encryption but also authenticity and integrity of the requested data. Another point is the anonymity of communication.

Besides the content of the requested pages there are the "closer circumstances of communication". The information that person X requested web pages Y is called traffic data.

If sufficient traffic data is summarized a usage profile of a certain person can be done. This profile can then be compared with other data for grid tracking (=Rasterfahndung, German). In the end is the total surveillance and loss of any privacy.

Honestly, how good is HTTPS?

128 bit HTTPS offers a pretty good protection for private, reliable and secure communication. Further attempts which promise a better protection for anonymity are ANON and Freenet.

Any Questions...

See our HTTPS FAQ for questions and answers: faq

Those who read the whole page and the FAQ and have further questions can write us an e-mail to mail@ccc.de.

Here is the old, outdated SSL-page: alt (German only)

The "S" as in security makes the difference.