HTTPS

What is HTTPS?

HTTPS (HyperText Transfer Protocol Secure) is the secure version of HTTP, the protocol used to transfer data between a web browser and a web server.

The "S" in HTTPS stands for "Secure". It means the connection between your web browser and the web server is encrypted using TLS (or its predecessor, SSL), so that data cannot be read or tampered with in transit.

How does HTTPS work?

When you visit an HTTPS website, your browser and the server carry out a "TLS handshake" before any data is exchanged. During this handshake, they agree on an encryption method and the server presents an SSL/TLS certificate to prove its identity. Once the secure connection is established, all data passing between them is encrypted.

How can you tell if a site uses HTTPS?

Most modern browsers display a padlock icon in the address bar when a site uses HTTPS, and the URL begins with "https://" rather than "http://". Some browsers also display a warning when you visit a site that does not use HTTPS, as the connection is unencrypted.

Why does HTTPS matter?

Without HTTPS, any data passing between your browser and a website is transmitted in plain text. This means that anyone intercepting the connection - such as an attacker on a public Wi-Fi network - can read or modify the data. HTTPS prevents this. Search engines such as Google also use HTTPS as a ranking signal, so sites without it may rank lower in search results.

HTTPS and MIDAS

All cloud-hosted MIDAS booking systems are served over HTTPS, ensuring that login credentials, booking data, and other sensitive information are always encrypted in transit. If you run a self-hosted edition, we recommend configuring your web server to serve MIDAS over HTTPS.