SECAI Core · phase 10 of 15 · noun

HyperText Transfer Protocol/HTTP Secure

Application protocol used to provide web content to browsers. HTTP uses port 80. HTTPS(ecure) provides for encrypted transfers, using TLS and port 443.

The Explain card

Plain English
HTTP is the language browsers and apps use to request and deliver web content, normally on port 80. HTTPS is the same conversation wrapped in TLS on port 443, so it is encrypted and the server is authenticated.
Example
A company's internal LLM assistant is served over plain HTTP on the office network. Anyone on that network can read employees' prompts, including pasted contracts and credentials. Moving it to HTTPS closes that window.
Why it matters
Nearly every AI product is delivered through HTTP APIs. Plain HTTP leaks prompts, session cookies, and API keys; HTTPS is the baseline that makes the rest of the security stack meaningful.
Hook
HTTP is a postcard, HTTPS is a sealed letter.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

During login, the browser uses HyperText Transfer Protocol/HTTP Secure to submit credentials to the bank's web server.

Why these words
  • HyperText English hyper- plus text, coined as hypertext by Ted Nelson in 1965 names the linked-text medium associated with the phrase
  • Transfer Latin transferre, to carry across names the movement expressed by the phrase
  • Protocol Greek protokollon, first sheet glued to a manuscript marks the phrase as the name of an agreed communication system
  • HTTP initialism of Hypertext Transfer Protocol compresses the first three words into their standard short form
  • Secure Latin securus, free from care distinguishes the security-focused form and supplies the S in HTTPS
Where it came from
Origin
English technical compound built from hypertext, transfer, protocol, and secure; HTTP was coined for Tim Berners-Lee's Web system, and HTTPS later added S
Entered the language
1990s
What changed
Older words for linked writing, carrying across, formal records, and freedom from care became components of standardized computing terminology
How it is spelled
Pattern
The initial letters of Hypertext Transfer Protocol form HTTP
Pattern
Adding the initial of Secure to HTTP forms HTTPS
Pattern
Protocol names conventionally capitalize their initialism even when the expanded words use ordinary title capitalization
Breaks the pattern
HyperText has an internal capital T in some legacy styling, while modern standards usually spell the word hypertext
Breaks the pattern
HTTPS is written without a slash, although expanded-name displays may place a slash between the long form and its abbreviation

Spelled like

  • File Transfer Protocol/FTP
  • Simple Mail Transfer Protocol/SMTP
  • HyperText Markup Language/HTML
Broken into chunks
  • hyper
    • hyperlink
    • hyperactive
    • hypersensitive
  • text
    • textual
    • textbook
    • context
  • trans
    • transport
    • transmit
    • translate
  • proto
    • prototype
    • protozoan
  • secur
    • security
    • securely
What it sits beside

Same subject

Same shape

  • HTTP
  • HTTPS
  • HTML
  • FTP
  • SMTP

network protocol initialisms

  • HTTP
  • HTTPS
  • FTP
  • SMTP

hypertext compounds

  • hypertext
  • hyperlink
  • hypermedia

Where it sits in the deck

Phase 10: Identity, Access, and Cryptographic Foundations

Before examining threats to systems, establish the foundational security primitives — identity, authentication, authorisation, and the cryptography underpinning them.

Neighbours in this phase