ブラウザとWebサーバ間の通信プロトコルを, HTTPからHTTPSに変更した。これによって実現できることとして, 適切なものはどれか。
平成28年度 春期 ITパスポート試験 問56
This question's explanation and your answers so far.
問 56
Incorrectア
Because HTTPS adds encryption and decryption processing, the communication and processing load actually tends to increase, and the communication speed does not improve as a result. Speed improvement is neither a purpose nor an effect of adopting HTTPS.
Incorrectイ
What HTTPS protects is “the encryption of data on the communication route,” not a function that prevents virus infection. If a virus is contained inside the encrypted communication, infection can still occur, so preventing infection is the role of separate measures such as anti-virus software.
- ウ
正解 HTTPS is a method that encrypts HTTP communication with TLS/SSL. Because the data exchanged between the browser and the Web server (such as entered passwords and personal information) is encrypted, its contents cannot be read even if the traffic is intercepted somewhere along the route. This is “ensuring the confidentiality of communication,” and it is the most essential effect that changing from HTTP to HTTPS can achieve. Therefore “ウ” is correct.
Incorrectエ
Since HTTPS involves encryption processing, there is no factor that makes display faster. The browser's display speed depends on factors such as the amount of content and the performance of the line and device, and it is not improved by changing from HTTP to HTTPS.
- HTTPS = a communication method that encrypts HTTP with TLS/SSL; by encrypting the communication content, it ensures “confidentiality (prevention of eavesdropping).”
- Distinguish the scope of HTTPS: it is the encryption of communication, and its purpose is neither to improve communication speed nor to prevent virus infection.