Computing · Secondary 3 · Cybersecurity and Defense · Semester 2

Verifying Online Identity and Trust

Students will learn how to identify secure websites (e.g., HTTPS, padlock icon) and understand why it's important to verify the identity of online sources.

• MOE Syllabus Outcomes
• MOE: Cybersecurity - S3

About This Topic

Verifying online identity and trust equips Secondary 3 students with skills to navigate the internet safely. They learn to spot secure websites through indicators like the HTTPS protocol and padlock icon in browsers. These features signal encrypted connections that protect data from interception. Students also practice checking website legitimacy by examining URLs for misspellings, verifying domain ownership, and cross-referencing sources before sharing personal information.

This topic fits within the Cybersecurity and Defense unit, fostering digital citizenship and critical evaluation skills essential for MOE standards. By analyzing real-world risks such as phishing attacks and fake news sites, students connect classroom learning to everyday online interactions like shopping or social media use. They develop habits to pause, verify, and report suspicious sources, reducing vulnerability to scams.

Active learning shines here because students actively inspect live websites, simulate attacks, and debate authenticity in groups. These hands-on methods turn abstract concepts into practical judgments, boosting retention and confidence in applying cybersecurity principles independently.

Key Questions

1. Explain the significance of 'HTTPS' and the padlock icon in a web browser.
2. Describe how to check if a website is secure before entering personal information.
3. Analyze the risks of interacting with unverified or suspicious online sources.

Learning Objectives

• Identify visual cues (HTTPS, padlock icon) that indicate a secure website connection.
• Explain the function of HTTPS in encrypting data transmitted between a user and a website.
• Analyze potential risks associated with entering personal information on websites lacking security indicators.
• Compare the security features of a verified website with those of a suspicious one.
• Demonstrate a method for verifying a website's legitimacy before submitting sensitive data.

Before You Start

Introduction to the Internet and World Wide Web

Why: Students need a basic understanding of how the internet and websites function to grasp the concept of secure connections.

Basic Online Safety Practices

Why: Prior knowledge of general online risks, such as not sharing passwords, provides a foundation for understanding more specific security protocols.

Key Vocabulary

HTTPS	Hypertext Transfer Protocol Secure. A protocol that encrypts communication between your browser and a website, ensuring data privacy.
Padlock Icon	A visual indicator in a web browser's address bar signifying that the connection to the website is secure and encrypted.
URL	Uniform Resource Locator. The web address of a website, which can be examined for suspicious patterns or misspellings.
Encryption	The process of converting information or data into a code to prevent unauthorized access, making it unreadable without a key.
Phishing	A fraudulent attempt to obtain sensitive information such as usernames, passwords, and credit card details by disguising oneself as a trustworthy entity in an electronic communication.

Watch Out for These Misconceptions

Common Misconception

Every site with a padlock icon is trustworthy.

What to Teach Instead

The padlock shows encryption via HTTPS but not content legitimacy; scammers can obtain certificates. Group audits of mixed sites help students spot fakes by checking URLs and domains, building discernment through peer comparison.

Common Misconception

HTTPS guarantees a site will not steal data.

What to Teach Instead

HTTPS secures transmission only; malicious sites can still phish for info. Simulations where students test 'secure' fake sites reveal this gap, with discussions reinforcing full verification processes.

Common Misconception

Familiar site names mean they are always safe.

What to Teach Instead

Typosquatting mimics brands with slight URL changes. Hands-on hunts expose these tricks, as students actively type and compare, correcting assumptions via real evidence.

Active Learning Ideas

Browser Hunt: Secure Site Check

Provide students with a list of 10 websites, some secure and some not. In pairs, they open each in browsers, note HTTPS status and padlock icons, then verify URLs. Pairs report findings and justify security ratings to the class.

30 min·Pairs

Phishing Simulation Stations

Set up stations with printed fake emails and websites. Small groups rotate, identifying red flags like urgent language or odd URLs, then check for HTTPS using mock browsers. Groups create posters summarizing verification steps.

45 min·Small Groups

Source Verification Debate

Divide class into teams with controversial online articles. Teams verify sources by checking HTTPS, author credentials, and cross-references. Hold a debate on trustworthiness, voting with evidence.

40 min·Small Groups

Personal Audit Challenge

Students individually audit their favorite sites for security features. They screenshot indicators and note risks, then share one improvement in a whole-class gallery walk.

25 min·Individual

Real-World Connections

• Online shoppers frequently encounter HTTPS and padlock icons when making purchases on e-commerce sites like Shopee or Lazada, ensuring their credit card details are transmitted securely.
• Job seekers use secure websites to submit applications and resumes to companies, verifying the legitimacy of the company portal to protect their personal data from identity theft.
• Citizens accessing government services online, such as applying for permits or paying taxes through platforms like the Singapore government's Singpass portal, rely on these security measures to safeguard sensitive information.

Assessment Ideas

Quick Check

Present students with screenshots of several website homepages, some secure and some not. Ask them to circle the security indicators (or lack thereof) and label each website as 'Secure' or 'Potentially Unsafe'.

Discussion Prompt

Pose the question: 'Imagine you receive an email asking you to click a link to update your bank account details. What steps would you take to verify the website's legitimacy before entering any information?' Facilitate a class discussion where students share their verification strategies.

Exit Ticket

On a small slip of paper, ask students to write down two key differences between a secure website and an insecure one, and one risk associated with interacting with an unverified online source.

Frequently Asked Questions

What does the HTTPS padlock icon mean for website security?

The HTTPS protocol and padlock icon indicate an encrypted connection between your browser and the site, protecting data like passwords from eavesdroppers. Students should still verify the URL for authenticity, as encryption alone does not prevent phishing or malware. Teach this by having them inspect sites before logging in.

How can students check if a website is secure before entering info?

Look for HTTPS in the address bar and the padlock icon. Hover over links to reveal true destinations, check for site certificates, and use tools like Google Safe Browsing. Practice with mixed site lists builds quick habits for safe online behavior.

How can active learning help teach verifying online identity?

Active methods like browser hunts and phishing simulations engage students directly with real indicators, making abstract risks concrete. Group debates on site legitimacy encourage evidence-based arguments, while personal audits promote ownership. These approaches improve retention over lectures, as students apply skills immediately and learn from peers.

What risks come from unverified online sources?

Interacting with unverified sites exposes users to phishing, identity theft, malware, and misinformation. Fake sites mimic legitimate ones to steal data or spread scams. Emphasize verification routines: check HTTPS, URLs, and reviews to mitigate these threats in daily use.