Skip to main content
Web Applications

Return to Answer

edited body
Source Link
Alex
Alex
  • 22.8k
  • 12
  • 83
  • 104

If someone would grab the session cookie, that is the cookie that identifies your session after you've logged on, they could gain access to a site as you without needing to break your password. The httpsHTTPS protocol helps preventing this because it makes it more difficult to see the information passed between your computer and the site, thus an attacker can't see the cookie.

So the purpose of the https-protocolHTTPS protocol is probably this. Since googleGoogle probably re-uses certain cookies and other information between their sites, it extra important to protect it so one can't break into your gmailGmail for example by using youtubeYouTube as an entry point.

If someone would grab the session cookie, that is the cookie that identifies your session after you've logged on, they could gain access to a site as you without needing to break your password. The https protocol helps preventing this because it makes it more difficult to see the information passed between your computer and the site, thus an attacker can't see the cookie.

So the purpose of the https-protocol is probably this. Since google probably re-uses certain cookies and other information between their sites, it extra important to protect it so one can't break into your gmail for example by using youtube as an entry point.

If someone would grab the session cookie, that is the cookie that identifies your session after you've logged on, they could gain access to a site as you without needing to break your password. The HTTPS protocol helps preventing this because it makes it more difficult to see the information passed between your computer and the site, thus an attacker can't see the cookie.

So the purpose of the HTTPS protocol is probably this. Since Google probably re-uses certain cookies and other information between their sites, it extra important to protect it so one can't break into your Gmail for example by using YouTube as an entry point.

Source Link
Smetad Anarkist
Smetad Anarkist
  • 269
  • 2
  • 9

If someone would grab the session cookie, that is the cookie that identifies your session after you've logged on, they could gain access to a site as you without needing to break your password. The https protocol helps preventing this because it makes it more difficult to see the information passed between your computer and the site, thus an attacker can't see the cookie.

So the purpose of the https-protocol is probably this. Since google probably re-uses certain cookies and other information between their sites, it extra important to protect it so one can't break into your gmail for example by using youtube as an entry point.