HTTP Port

Every computer on the internet has an address, similar to a house number. This address alone, however, is not enough. A single machine often runs several programs that want to receive data from the network at the same time. So that incoming data ends up with the right program, there is, in addition to the address, a number: the port. The HTTP port is exactly the number at which a machine waits for requests from web browsers. If the address is the house, then the port is the apartment number inside it.

Why 80 and 443 apply almost everywhere

Ports only work if everyone agrees on the same numbers. That’s why certain numbers were permanently assigned. The 80 belongs to HTTP, the normal, unencrypted retrieval of web pages. The 443 belongs to HTTPS, the encrypted variant. Nearly all web traffic today runs over 443.

This agreement saves you typing every day. When you enter an internet address, your browser silently adds the port number. Only with unusual numbers do you have to specify them yourself, separated by a colon. Addresses with an appended 8080 are a typical example of this.

For companies, this standardization is also practical. Protection systems in networks decide which traffic to let through based on the port number. In many school and company networks, only a few ports are open, almost always including 80 and 443. That is precisely why some programs deliberately hide their traffic behind the HTTP port.

The path of a browser request

On the web server, a program runs that permanently listens on a port number. Experts say the program is listening on port 443. When a request with this number arrives, the operating system passes it on to exactly this program. The program finds the matching page and sends it back.

The return direction uses a different port. Your device assigns a random, high number for each connection, often above 40000. This way your computer later knows which browser tab an incoming reply belongs to. A connection therefore always consists of four pieces of information: two addresses and two ports.

A common misconception is that the port encrypts data. That is not true. Encryption is performed by a separate procedure called TLS, which makes the content unreadable. Port 443 is merely the number under which one expects this encrypted connection. Technically, encrypted pages could also be delivered over any other number.

Ports on your own machine and in error messages

You encounter HTTP ports most clearly when programming. Anyone developing a website locally usually starts a small test server. It typically runs on port 3000, 5000, or 8080, because port 80 requires special privileges on many systems. In the browser, you then type in the address of your own machine along with the port number.

Error messages also often mention ports. The message that a port is already in use simply means: another program is already listening on that number. Two programs cannot share the same port. Usually it helps to close the old program or choose a different number.

Ports also appear in reports about security vulnerabilities. Attackers systematically scan the internet for open ports to find vulnerable services. A server should therefore keep open only the ports it truly needs. For a plain website, that is exactly two.