In addition to using plain text socket communication, HTTPS session encrypt data using SSL protocol (Secure Socket Layer) or TLS protocol (Transport Layer Security). Both protocols provide adequate protection against eavesdroppers, and man in the middle attacks. In general, HTTPS port is 443.
Level of protection depends on the correctness of the implementation of a web browser and server software and supported by the actual encryption algorithm.
Therefore, the use of HTTPS web pages, and URLs that are used beginning with 'https: / /' instead of 'http://'
Misunderstandings that often occur on the user's credit card on the web is with regard HTTPS "fully" protect their transactions. While in reality, HTTPS only encrypts the information from their cards between their browser by a web server that receives the information. On the web server, nominally card information is typically stored in a database server (sometimes not sent directly to a credit card processing), and the database server is the most frequent target of attack by parties who are not interested.