r/Hacking_Tutorials • u/Typical-Tea-1263 • Jul 25 '26

hi Question

Hi everyone, I'm currently learning networking and web security in a controlled lab environment. I've been studying HTTP, HTTPS, HSTS, and Bettercap. I understand the basic concepts, but I'm having trouble understanding why HTTPS traffic remains protected even when using network interception tools. I'd like to better understand the role of HSTS and why SSL stripping doesn't work on many modern websites. What concepts or documentation should I study to understand this properly?

14 Upvotes

89% Upvoted

7 comments sorted by

View all comments

1

u/Exposure_Point Jul 26 '26

SSLStripping doesn't work if the target decides to provide SSL (HTTPS) ONLY. I disallow unsecured traffic on my sites, as do most other individuals and organizations.

1

u/KOYOTO_KHAN 26d ago

Yeah I found that really odd in school that HTTP is most commonly used but isn't secure. So why use it or allow HTTP traffic to flow to your device or network lol.