Today I received a chain email regarding the different HTTP and HTTPS web address, and the email is asking us to check for HTTPS for a secure online. Then I replied her with the content is as follows:
Yes, by identifying the http or https is also a good way to ensure secure online transaction, BUT....it is not enough, why ?
There are many phishing scams and fake websites are now https-enabled their fake websites.
https:// is simply mean that it is the secure transmission between you and their web server - and nothing else. In other words, when you surf/browse internet with https - it means that anything you key-in (fill-up the online forms), the https technology will ensure the transmission your keyed data to the webserver is not easily read or open by other system or people.
So, if you are at the wrong website and even if there is https, then you are are transferring your confidential or sensitive information (eg. credit card number) to those fake server.
HTTPS is not always secure your online transaction - see this link for its limitation. But, at least we have some level of security rather than nothing.
For example, if a fake server create a website with the designs & contents are almost "exactly" same as the real website.
Real (correct website)
http://www.tigerairways.com/
https://booking.tigerairways.com/
Fake website could be :
http://www.tiger-airways.com/
https://booking.tiger-airways.com/
Real (correct website)
http://www.maybank2u.com.my/
https://www.maybank2u.com.my/
Example of Fake websites (the registered domain names are similar to the real one)
http://www.maybank2u-my.com/
https://www.maybank2u-my.com/
http://maybank2umy.com/
http://myban2common.com/maybank2u/common
http://mail.gemacocards.com/www.maybank2u.com.my/index.html
Many people still do not check the web address, and many of them do not know the actual or real website address. So, safeguard ourselves, we must also remember the web address correctly. Next time, please check your web address, is always start with "https://" otherwise please do not key-in your name and password, because without HTTPS, your logon information can be stolen.
Yes, by identifying the http or https is also a good way to ensure secure online transaction, BUT....it is not enough, why ?
There are many phishing scams and fake websites are now https-enabled their fake websites.
https:// is simply mean that it is the secure transmission between you and their web server - and nothing else. In other words, when you surf/browse internet with https - it means that anything you key-in (fill-up the online forms), the https technology will ensure the transmission your keyed data to the webserver is not easily read or open by other system or people.
So, if you are at the wrong website and even if there is https, then you are are transferring your confidential or sensitive information (eg. credit card number) to those fake server.
HTTPS is not always secure your online transaction - see this link for its limitation. But, at least we have some level of security rather than nothing.
For example, if a fake server create a website with the designs & contents are almost "exactly" same as the real website.
Real (correct website)
http://www.tigerairways.com/
https://booking.tigerairways.com/
Fake website could be :
http://www.tiger-airways.com/
https://booking.tiger-airways.com/
Real (correct website)
http://www.maybank2u.com.my/
https://www.maybank2u.com.my/
Example of Fake websites (the registered domain names are similar to the real one)
http://www.maybank2u-my.com/
https://www.maybank2u-my.com/
http://maybank2umy.com/
http://myban2common.com/maybank2u/common
http://mail.gemacocards.com/www.maybank2u.com.my/index.html
Many people still do not check the web address, and many of them do not know the actual or real website address. So, safeguard ourselves, we must also remember the web address correctly. Next time, please check your web address, is always start with "https://" otherwise please do not key-in your name and password, because without HTTPS, your logon information can be stolen.
Please enjoy online securely and good luck.
No comments:
Post a Comment