In fact, 79% of U.S. consumers say that they shop online more frequently now than they did before the Covid-19 pandemic. Although, it also has some risks and challenges, especially when it comes to paying with your credit card.
How can you tell if a website is trustworthy and secure for online payments? What does it mean when a website has HTTP or HTTPS in its web address? How does it affect your online security and privacy?
We’ll get to those questions. Let’s start by answering this one from Margaret from Fort Lauderdale, Florida.
Does https mean the site takes credit cards and http is okay if they don’t take credit cards?
– Margaret Jane, Fort Lauderdale, FL
Margaret Jane raises an excellent question. Let’s go over the difference between “HTTP” and “HTTPS” and whether it matters or not when you’re paying with a credit card online.
MORE: DON’T FALL FOR THIS NEW BANKING SCAM
What’s the difference between “HTTP” and “HTTPS”?
The difference between HTTP and HTTPS is that HTTPS uses an SSL (Secure Sockets Layer) certificate to encrypt all data transfer, while HTTP is not secured with an SSL certificate and is much more open to hackers stealing sensitive information.
It’s all about the letter “S”
In the simplest of terms, imagine you are sending a letter to your friend through the mail. HTTP is like sending a letter in a normal envelope. It is not very secure, and anyone who intercepts the letter can open it and read your message.
HTTPS is like sending a letter in a locked envelope. It is very secure, and only you and the recipient can open it and read your message.
Why is HTTPS more secure than HTTP?
HTTPS is more secure than HTTP because it uses an SSL certificate to encrypt the data that is transferred between the web server and the browser. This means that anyone who tries to intercept or tamper with the data will not be able to read or modify it.
How HTTPS protects your data with SSL certificates
SSL certificates also verify the identity of the website, so you can be sure that you are dealing with a legitimate site and not a fake one. An SSL certificate is a digital document that contains information about the website, such as its domain name, owner, and expiration date.
It also has a public key and a private key, which are used to encrypt and decrypt data. The public key is shared with anyone who wants to communicate with the website, while the private key is kept secret by the website owner.
How your browser verifies and encrypts data with HTTPS
When you visit a website that uses HTTPS, your browser will check the SSL certificate and make sure that it is valid and matches the website’s domain name.
If everything is okay, your browser will establish a secure connection with the website and exchange encryption keys.
Then, all the data that is sent and received will be encrypted using these keys.
How to identify HTTPS websites in your browser
You can tell if a website is using HTTPS by looking at the web address in your browser.
If it starts with https://, then it means the website is secure.
You may also see a padlock icon or a green bar next to the web address, which indicates the website has a valid SSL certificate.
MORE: HOW THIS SAFE BROWSING FEATURE IS USING AI TO STAY AHEAD OF SCAMMERS
Why you should avoid paying with credit cards on HTTP websites
Whether a site takes credit cards or not has nothing to do with whether it uses HTTP or HTTPS. However, if a site does take credit cards, it’s important that it uses HTTPS to protect the sensitive information being transferred.
If you’re on a website that uses HTTP and it’s telling you to pay for something with a credit card, you should probably steer clear of it.
The website could be a phishing page or be infected with some sort of malware that could hand your credit card information over to a hacker, and then they could do whatever they want with it.
MORE: HOW YOUR BROWSER COULD BE EXPOSED TO A SECURITY RISK
What can I do to protect myself from a keylogging attack
There are a number of precautions that you can take to avoid becoming the next victim of a keylogging attack.
Have good antivirus software on all your devices
Use a password manager
Keyloggers can’t record what you don’t type, so using a password manager that automatically fills in your login credentials can help you avoid typing them. You should also use strong and unique passwords for each account and change them frequently.
Keep your software and apps updated
Updating your operating system, browser, antivirus software, and other applications can patch any security vulnerabilities that hackers can exploit to install keyloggers. I know I sound like a broken record here. You should avoid clicking on suspicious links or attachments that may contain malware.
Use a Virtual Private Network (VPN)
Kurt’s key takeaways
Always keep a watchful eye out when you’re visiting websites that you have never seen before. Check the URL and make sure that it begins with HTTPS, especially when you are dealing with sensitive information such as passwords, credit card numbers, personal details, etc. This way, you can protect yourself from hackers who may try to steal your information or harm your cellphone or computer.
What else do you wish websites could do to prove that they are safe and secure?
FOR MORE OF MY TECH TIPS AND SECURITY ALERTS, SUBSCRIBE TO MY FREE CYBERGUY REPORT NEWSLETTER HERE
Related:
- How this safe browsing feature is using AI to stay ahead of scammers
- How your browser could be exposed to a security risk