How Carrier Pigeons Explain HTTPS: From Caesar Cipher to Public Keys

Introduction

Password and encryption may seem daunting, but the article uses a simple pigeon analogy to make HTTPS concepts approachable.

Alice, Bob and the Pigeon

All internet actions—reading pages, buying items—are essentially messages exchanged with servers. Imagine these messages carried by carrier pigeons. Alice sends a letter tied to a pigeon to Bob; Bob reads it happily. Mallory intercepts the pigeon, opens the letter, and alters its content, illustrating a man‑in‑the‑middle attack.

First Communication

Alice sends a plain message; Mallory can read and modify it because no encryption is used.

Symmetric Encryption – Caesar Cipher

Alice and Bob agree to shift each alphabet character by three positions (D→A, E→B, …). The plaintext “secret message” becomes “pbzobq jbppxdb”. Mallory, unable to understand the ciphertext, cannot alter it. Bob reverses the shift to recover the original message, demonstrating symmetric key encryption.

Key Distribution Problem

If Alice and Bob have never met, they cannot share the secret shift value securely; any key sent in the clear can be intercepted by Mallory, leading to a classic man‑in‑the‑middle scenario.

Asymmetric Encryption – Public‑Key Boxes

To solve the key‑exchange issue, they use a locked box system. Bob first sends an unlocked box to Alice; Alice places the message inside, locks it with her “public key” (the box), and returns it. Only Bob’s “private key” (the lock) can open the box, preventing Mallory from reading or modifying the contents.

Certificate Authority

The trusted “Ted” who signs boxes represents a Certificate Authority. Ted verifies identities before signing, allowing Bob to trust that a box truly comes from Alice.

Combining Asymmetric and Symmetric Methods

Because asymmetric encryption is slower, Alice and Bob use it only to exchange a symmetric key, then communicate efficiently with the fast Caesar‑style (symmetric) cipher.

Conclusion

In real HTTPS, asymmetric encryption establishes a secure channel for exchanging symmetric keys, after which data is transmitted quickly and securely.