All lessons Leer en español

Everyday security · Unit 01 · Lesson 3 of 6

Safer browsing

A secure connection and a trustworthy website are two different questions.

5 minready

After this lesson you can

  • describe what HTTPS protects and what it cannot promise
  • use a known route to reach an important account
  • decide whether a site's permission request fits the task

A new shop has a beautiful page and an address beginning with “https”. Your friend says that means it is safe. Safe in which way?

A protected connection is useful. It is only one part of the decision.

1. Choose where you are going. 2. Check the connection. 3. Grant only the access your task needs.

The connection and the destination

HTTPS protects the conversation between your browser and the site. It helps prevent someone along the route from reading or changing that traffic, and checks the server’s identity for the hostname you requested.

It does not promise that the business is honest, its advice is accurate, or a download is harmless. A scam site can also use HTTPS. Think “protected route to this site”, then ask whether this is the site you intended to visit.

For important accounts, use the app or bookmark you already trust. A logo, search ranking, or sponsored result alone cannot establish that you reached the right organization.

Permissions are another decision

A site may request permission to use your location, camera, microphone, or notifications. Match the request to your current task. A video call needs a microphone; reading a recipe usually does not.

You can decline an unnecessary request and review existing site permissions in browser settings. Agreeing once need not be a permanent decision.

If your browser shows a security warning, stop before entering information. Check through another trusted route instead of dismissing the warning because the page looks familiar.

Takeaway: Check the destination, the connection, and the access you grant.

Terms you met

HTTPSpermission

Check yourself

No timer. No penalties. Read the explanation and try again whenever you like.

  1. A shop uses HTTPS. What can you conclude?

    Show the answer

    Correct answer: The connection is protected, but the shop still needs checking. HTTPS protects data in transit to that site; it does not certify the seller's conduct.

  2. You need to check your bank after an alarming message. Which route is strongest?

    Show the answer

    Correct answer: Open the bank app you already use. You are choosing a known route instead of relying on the alarming message.

  3. A recipe site asks for your location. You only want to read the recipe. What is reasonable?

    Show the answer

    Correct answer: Decline; location is not needed for this task. Permission should match what you want to do. You can reconsider later if a feature needs it.

  4. A browser warns that it cannot verify a connection to an important account. What next?

    Show the answer

    Correct answer: Stop and use the official app or another known route to get help. Do not send secrets while that warning is unresolved. It can have several causes.

Try it

  • WriteOn paper, match these fictional tasks to the access they need: a video call, reading a recipe, and finding nearby bus stops. Decide when camera or location access helps, and when you would decline.
References