Skip to main content

RFC 2818 - HTTP Over TLS (HTTPS)

  • Status: Informational
  • Published: May 2000
  • Stream: IETF
  • Obsoleted by: RFC9110
  • Errata: No Errata

Abstract​

This memo describes how to use TLS to secure HTTP connections over the Internet. Current practice is to layer HTTP over SSL (the predecessor to TLS), distinguishing secured traffic from insecure traffic by the use of a different server port. This document documents that practice using TLS. A companion document describes a method for using HTTP/TLS over the same port as normal HTTP [RFC2817].

Importance​

RFC 2818 is the cornerstone of Web security:

  • 🔒 Defines the basic mechanism of HTTPS
  • 🌐 Foundation of security for all modern websites
  • 🔑 Certificate validation and identity verification
  • ⚡ Secure connection establishment and closure

Table of Contents​