What is the purpose of HTTP?
It establishes a connection between a client and a server to transfer webpages and associated files.
Hyper Text Transfer Protocol
Outline the HTTP process.
User types a URL.
- Browser sends an HTTP request to the correct web server.
- Server sends an HTTP response with the requested file.
- Additional requests are made for extra files (e.g., images).
What is HTTPS?
A secure version of HTTP that encrypts data using TLS or SSL.
Hyper Text Transfer Protocol
Why is HTTP used for downloading web pages instead of FTP?
HTTP is specifically designed for web content delivery, while FTP is designed for general file transfer.
What is FTP used for?
Transferring files between a client and a server using an FTP address, username, and password.
File Transfer Protocol
What are the two FTP connections?
Control connection: Sends commands and manages the session.
Data connection: Transfers files between client and server.
Why are secure payment protocols used?
To ensure online payments (eCommerce) are transmitted securely and protect sensitive data such as bank details.
What is SET?
A secure communication protocol initially supported by Mastercard and Visa; discontinued due to complexity.
Secure Electronic Transaction
Summarize the SET process.
1.Purchase order sent to merchant.
2. Card details sent to merchant’s bank.
3. Bank authorises payment.
4. Authorisation returned to merchant to finish transaction.
What is 3D Secure?
A widely used authentication protocol for online payments (e.g., Visa Secure, Mastercard Identity Check) using XML and SSL.
Summarize the 3D Secure process.
- User enters card details; merchant checks if card uses 3D Secure.
- If yes, user is redirected to their bank’s authentication page.
- Successful authentication is sent to the merchant.
- Merchant sends payment + authentication to their bank.
How can you tell a website is secure for online purchases?
Look for HTTPS and the padlock symbol in the address bar.
Difference between SET and 3D Secure?
SET: Very secure but overly complex; no longer widely used.
3D Secure: Modern, simple, widely adopted authentication step to reduce card fraud.
