RFC 2818 Quiz

HTTP Over TLS (HTTPS)

🇺🇸 🇯🇵

0 / 0

References (URLs)

RFC 2818: HTTP Over TLS

Goal: map https URLs to connection behavior and security expectations.

Show explanation immediately Show all answers

Q1: A URL with scheme https implies

Multiple Choice

A. HTTP is disabled for the host forever B. HTTP is carried over TLS with server authentication expectations C. The payload is Base64 encoded but not encrypted

**Explanation:** **Correct (B):** HTTPS means HTTP over TLS, with the usual TLS server identity checks **Options:** - A (incorrect): A host can serve both http and https - C (incorrect): Base64 is not the security mechanism

Q2: The default port for https URLs is

Multiple Choice

A. 443 B. 80 C. 22

**Explanation:** **Correct (A):** If no port is specified, https maps to 443

Q3: TLS provides which properties for HTTP messages (select all)

Multi-Select

A. Confidentiality against passive observers B. Integrity against tampering on the wire C. Server authentication based on certificates D. Guaranteed application level authorization

**Explanation:** **Correct (A,B,C):** TLS protects the channel, but it does not decide who is authorized **Options:** - D (incorrect): Authorization is an application concern

Q4: Your app builds an absolute URL from user input. Which check helps prevent mixed scheme confusion

Multiple Choice

A. Replace all https with http for consistency B. Strip the host and always use localhost C. Explicitly require https when credentials or tokens are in scope

**Explanation:** **Correct (C):** Security sensitive flows should enforce https and avoid downgrade paths

Q5: A correct statement about the https scheme is

Multiple Choice

A. It is a distinct URI scheme from http B. It means the server must use Basic auth C. It forbids redirects to other origins

**Explanation:** **Correct (A):** http and https are different schemes, which matters for origin and default port

Q6: What is the default port number for https

Short Text

**Explanation:** **Correct:** 443