Progressive Web Application Development by Example
上QQ阅读APP看书,第一时间看更新

Integrity

Because the connection is encrypted and third-party actors cannot tamper with data, each end knows the data is valid. This is because the man-in-the-middle attack is thwarted.

It is not just bad guys you need to worry about. Third-party content, such as ads, could be injected into a response anywhere along the way with HTTP. For example, an ISP or your local coffee shop could modify the request and response to reroute you to a different server or change the content you view.

HTTPS gives both the customer and the server confidence that the conversation contains the real data. There is no guarantee that the data received by either the client or the server is correct when HTTP is used.