HTTP vs HTTPS development difference

[Priyanka Dandekar]

I am new to HTTPS based web applications, and was still not sure how is it different to develop a HTTPS based web application then HTTP based web application.

Do I really need to take care of somethings specially in case I am doing HTTPS web application development?

I assume it should not be different from HTTP but still want to be sure if there are somethings specifically taken care while my application is going to be used over HTTPS.

Any thoughts ?

[Ulf Dittmer]

There's nothing different from a development point of view. Just make sure you don't hardcode the protocol anywhere (which would be bad practice anyway).

If you need to check whether a request was made using HTTP or HTTPS, you can use the HttpServletRequest.isSecure() method.

[benjamin muktesh]

HTTP and HTTPS are network protocols.
You application is (or should be) agnostic to these.

The server on which your application will run will have to be configured to use HTTPS.

Do a bit of reading on SSL configuration on Tomcat or IIS for that matter and you should have a better idea.

[Priyanka Dandekar]

Thanks a lot for your responses.....I just read about OSI layer to understand the networking aspect of it...Looks like SSL comes at Presentation layer of OSI stack.....and our application program runs at application layer....So it need not worry about what is next layer doing.

Hope my understanding here is correct.......

I am also going through the SSL stuff ....