HTTPS and the padlock

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which web address uses HTTPS to encrypt data?

A https://www.myschool.edu.au

B http://www.myschool.edu.au

2. What does HTTPS do to the data you send to a website?

A It sends the data as plain text anyone can read

B It encrypts the data so others cannot read it

3. Where do you see the padlock that shows a site uses HTTPS?

A At the bottom of the web page's text

B In the browser's address bar

4. You are about to type your password into a login page. When should you check for https:// and the padlock?

A Before you enter the password

B After you press the login button

5. A website shows a padlock. What does this prove?

A Your connection to the site is encrypted

B The website is definitely trustworthy and safe

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1https://		Ahttps://paypa1-login.example.com
2http://		BA padlock only shows the connection is encrypted. It does not prove the site is real or trustworthy, so you still need to check the address and look for scam signs.
3Before typing a password or card number, check that the address bar shows a padlock and https://		Chttps://shop.example.com.au/checkout
4A padlock only means the connection is encrypted, not that the site is honest, so a fake site can still have one		DThe start of a web address that sends data as plain readable text, with no encryption
5http://mybank.example.com.au/login		EThe address uses http:// with no S, so the login details would be sent unencrypted. It should start with https://.
6I can see a padlock, so this site must be safe to trust.		FThe start of a web address that shows the connection between your browser and the website is encrypted

Definitions

HTTPS

Fill in the Blanks

Complete each line of code by filling in the missing parts.

_____://www.example.com.au

https___www.school.example.edu.au

IF site uses HTTPS THEN browser shows a _______ icon END IF

IF address starts with "http://" THEN warn: data is not _________

padlock shown _ trustworthy site

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A protocol ← HTTP

B encrypted ← true

C address ← protocol + '://'

D print address

Question 2

A site ← 'https://bank.com.au'

B if site starts with 'https'

C show padlock

D encrypted ← false

Question 3

A padlock ← true

B trusted ← always true

C if padlock and unsure

D check the web address

Question 4

A action ← enter password

B if action is sensitive

C skip the padlock check

D then type password

Question 5

A url ← 'http://shop.com.au'

B if url starts with 'http://'

C data is encrypted

D warn user

Answer Key

HTTPS and the padlock

Section A: Quick Questions

A — https://www.myschool.edu.au

B — It encrypts the data so others cannot read it

B — In the browser's address bar

A — Before you enter the password

A — Your connection to the site is encrypted

Section B: Match the Pairs

https:// → The start of a web address that shows the connection between your browser and the website is encrypted

http:// → The start of a web address that sends data as plain readable text, with no encryption

Before typing a password or card number, check that the address bar shows a padlock and https:// → https://shop.example.com.au/checkout

A padlock only means the connection is encrypted, not that the site is honest, so a fake site can still have one → https://paypa1-login.example.com

http://mybank.example.com.au/login → The address uses http:// with no S, so the login details would be sent unencrypted. It should start with https://.

I can see a padlock, so this site must be safe to trust. → A padlock only shows the connection is encrypted. It does not prove the site is real or trustworthy, so you still need to check the address and look for scam signs.

Section C: Definitions

HTTPS — A secure way for your browser to talk to a website. It encrypts the data you send and receive, and shows https:// and a padlock in the address bar. A padlock does not prove a site is trustworthy.

Section D: Fill in the Blanks

https://www.example.com.au

https://www.school.example.edu.au

IF site uses HTTPS THEN
  browser shows a padlock icon
END IF

IF address starts with "http://" THEN
  warn: data is not encrypted

padlock shown ≠ trustworthy site

Section E: Spot the Error

A — HTTP does not encrypt data, but line 2 says encrypted is true. The protocol should be HTTPS so the address shows https:// and the data is encrypted.

D — If the site starts with https and shows a padlock, the data between the browser and the site is encrypted. It should say encrypted ← true.

B — A padlock only means the connection is encrypted. It does not prove the site is trustworthy, so trusted should be not guaranteed.

C — You should check for https:// and the padlock before typing a password or other private details. Skipping the check is unsafe, so the line should be check padlock first.

C — Plain HTTP does not encrypt data, so others could read it. This line should say data is not encrypted.