HTTPS is a significantly more secure version of HTTP, which is the protocol you generally use to load up your webpages (whether you're aware of it or not). HTTP stands for Hypertext Transfer Protocol, so HTTPS stands for the same thing but with Secure on the end of it. This is because, as Wikipedia will tell you, HTTPS is "a combination of the Hypertext Transfer Protocol with the SSL/TLS protocol to provide encrypted communication and secure identification of a network web server."
So yeah, you get it: HTTPS provides additional security, but what does that actually mean when you're browsing the web every day? It basically means you're protecting your private information from people who want to steal it using readily availably tools like Firesheep.
It means when you enter your password or your phone number or anything personal on Facebook—or any other site offering HTTPS—that data will be encrypted as it flies through the great tubes of the internet.
Think of it like this: you're having a private conversation with your new boyfriend or girlfriend, and your ex—unbeknownst to you—is a few tables over listening to every word. That's the sort of risk HTTP poses, whereas HTTPS would be more like if you and your new romantic interest were speaking a new language that only the two of you understood. To your stalker of an ex, this information would sound like gibberish and s/he wouldn't get any value from listening if s/he tried. HTTPS is a way for you to exchange information with a web site securely so you don't have to worry about anyone trying to listen in.
Good choice! Enabling HTTPS in Facebook is very easy. Just visit your Account Settings page, select Account Security (it's the third option from the bottom), and you'll find a checkbox to enable HTTPS under the Secure Browsing header. That's all you have to do. NOTE: This feature hasn't been rolled out to all accounts and so it may not be available to you yet. We're told it's going to take a few weeks, so you should have it by mid-February at the latest.
Why You Should Care
So yeah, you get it: HTTPS provides additional security, but what does that actually mean when you're browsing the web every day? It basically means you're protecting your private information from people who want to steal it using readily availably tools like Firesheep.
It means when you enter your password or your phone number or anything personal on Facebook—or any other site offering HTTPS—that data will be encrypted as it flies through the great tubes of the internet.Think of it like this: you're having a private conversation with your new boyfriend or girlfriend, and your ex—unbeknownst to you—is a few tables over listening to every word. That's the sort of risk HTTP poses, whereas HTTPS would be more like if you and your new romantic interest were speaking a new language that only the two of you understood. To your stalker of an ex, this information would sound like gibberish and s/he wouldn't get any value from listening if s/he tried. HTTPS is a way for you to exchange information with a web site securely so you don't have to worry about anyone trying to listen in.
Okay, I Want HTTPS Right Now!
Good choice! Enabling HTTPS in Facebook is very easy. Just visit your Account Settings page, select Account Security (it's the third option from the bottom), and you'll find a checkbox to enable HTTPS under the Secure Browsing header. That's all you have to do. NOTE: This feature hasn't been rolled out to all accounts and so it may not be available to you yet. We're told it's going to take a few weeks, so you should have it by mid-February at the latest.
