HTTP is less secured, while HTTPS is secured. HTTP sends data over port 80, while by default, HTTPS uses port 443. HTTP functions on the application layer, while HTTPS works on the transport layer—no SSL certificates required for HTTP. HTTPS, an SSL certificate, and a CA sign it.