HTTPS encrypts internet traffic.
With HTTP your browser may send a request to example.com/login with the below data
{username: 'picman', password: 'penis'}
Hence, if I (as an attacker) captured your wifi traffic, I could steal your website pasword
With HTTPS, the message would be encrypted, like so
W32jxx7nKW7W68Hqqw3VJMOaWdHNAAc2I0jy7hnGywzkhAjzXC2box00NYclj3h6
With HTTPS if I stole your wifi traffic, I still couldn't see your login information.
(post is archived)