Questions tagged [http]

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement.

HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement.

HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

1504 questions
-2
votes
3 answers

Can a website that uses https be absolutely reliable?

Https websites cover some security requirements and certify the author, but how can we be sure that an author of such an https website is not malicious?
Prometheus
  • 169
  • 5
-2
votes
1 answer

What are the most common HTTP ports?

What are the most common ports for HTTP services? 80,443,8080 are common for all of us, but what else are used?
CobyT
  • 97
  • 1
  • 2
  • 6
-2
votes
1 answer

is encrypted body http secure

I'm working on an embedded project that needs to communicate with a server. Both the server and the device have an AES key pre-installed. I have a network device that provides http services but not https. My proposal is to AES encrypt the data in…
pilotjack59
  • 1
  • 1
-2
votes
1 answer

What is the Impact of TRACE Method?

What attacker will benefit of TRACE Exploitation and What is the Recommendation to fix this issue?
Sneaker
  • 1
  • 4
-2
votes
1 answer

How does https check md5, sha-1 and sha-2 fingerprints?

When a https site shows multiple finger prints, i.e.: md5 and sha1, or sha256 and sha1, how does the browser check? is it both just the "strongest" or whatever is convenient? This question arose because somewhere it was stated that a site used weak…
user59782
  • 11
  • 1
-2
votes
2 answers

How to avoid session sharing inside the same network

I was thinking about a situation to avoid session sharing or hijacking, validating the IP the user logged in against the ip that is accessing any page after log in. It was working until I figured it's possible when the user are coming from other…
user3551863
  • 101
  • 1
  • 1
-2
votes
3 answers

Could someone hack into my website through http ports?

Let's say ports 80 and 443 open for my website hosted by Amazon AWS. Could someone figure out a way to exploit somehow or is that just nearly impossible and something no one would need to worry about?
ThrownRedstone
  • 19
  • 1
  • 5
-2
votes
1 answer

Can someone tell me whats the encryption in this?

khgpd://zpn.xddspbx.nrf/j/9djwth14tmct9tf/uzdwvrrnonv.tue?gz=0 This is an encrypted text and is most prob a url....pls decode it or tell me which cipher is it, this is not for any security breaches and it is a hint in a cryptic hunt
InquisitiveGuy
  • 1
  • 1
-2
votes
1 answer

HTTP/3 No more TLS or TCP

I was reading documentation about HTTP/3, and in the article, they sed that they are no longer TLS or TCP. So it's mean that a web site with no SSL 80 will be changed to what port and 443 will be replaced with what port? Also how CA will make SSL…
User3298137412
  • 19
  • 5
-2
votes
1 answer

Digest authentication - client side

Possible Duplicate: Client side password hashing How one design support for digest authentication in client side. HTML form probably won't help. Does one need javascript and set the header explicitly or any better way.
bsr
  • 121
  • 4
-2
votes
2 answers

This client doesn't verify which representation it requested, while expecting a specific one. What are the security implications?

I am currently investigating a mobile app API. There is a feature which fills in a form in the app automatically. The user supplies a string which contains all the compressed form data. And then the app displays the filled in form for the user to…
Martin Fürholz
  • 850
  • 10
  • 21
-2
votes
2 answers

XSS with HTTP flag true

Since HTTP only flag is used to mitigate Cross Site scripting, we cannot perform XSS on the web application? If we can, What are some best real time examples to pentest XSS when HTTPOnly Flag is true?
Eshwar P
  • 101
  • 2
-2
votes
1 answer

HTTP POST Request Encryption

I have a client and a server that exchange information with each other and i want to encrypt the contents of the POST request? What kinds of encryption are supported by the HTTP Post request? Thanks
Yousif Shibeika
  • 39
  • 1
  • 5
-2
votes
1 answer

Should HTTPS work automatically on my website or does it need to be allowed somehow?

If I simply type in security.stackexchange.com into my browsers URL bar, it uses HTTPS to fetch data from the server. Is it possible for a website to not work over HTTPS? Does it have to be configured manually from the server side by the owner of…
MrSeelvuple
  • 11
  • 2
-2
votes
1 answer

How to force authentication over HTTPS - Wordpress

During our last PCI scan, we received these 2 fail points: "Basic Authentication over HTTP" and "Web Page Transmits Login Credentials Without Encryption." Both were on Port 2077. Though our Wordpress website has an SSL, it seems as if logging in is…
Arvy S.
  • 15
  • 5
1 2 3
…
99
100