>>Hi.
>>Whats the difference between http and https
>>Is dot net https out of the box or does something have to be done to ensure https is used ??
>>Regards,
>>Gerard
>
>HTTPS means it's a secure connection. I believe you need to install a certificate on your web server from a provider such as Verisign.

HTTPS basically is encrypted - certifactes *may* be needed for identification or sometimes key generation, but the basic function is to avoid listening in on the data stream. Certificates are helpful in weeding out man in the middle attacks.

HTH

thomas