简体   繁体   中英

HTTPS POST data is not encrypted

I am trying to understand in practice, what are the differences between POSTING data using the same web page with and without SSL (HTTPS) so I've created a PHP file with a single form, a textfield and a button to post data and I didn't notice any changes on the headers except one CACHE variable.

For instance, after posting the form, under the Network tab of the Developer Tools, I can fully read the header and form contents in both connections with or without SSL.

My question is: With a https:// localhost POST, aren't this headers suposed to appear encripted?

SSL is an end-to-end encryption between the web server and the web browser; this means that the traffic in between those two endpoints is encrypted.

Since you're at one end (the browser), you can see what has been sent and received, but someone in between can't.

The entire request and the response will be encrypted between the browser and the server.

Since you are looking at the headers using the browser, you won't see the encrypted form of the data as it has access to the unencrypted version.

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM