Overview
Direct Answer
HTTPS is the encrypted version of HTTP that layers the TLS (Transport Layer Security) protocol over standard HTTP communication, ensuring data confidentiality, integrity, and server authentication. It uses asymmetric cryptography during handshake and symmetric encryption for subsequent session data.
How It Works
The protocol initiates a TLS handshake where the client and server exchange certificates and agree on encryption algorithms before any application data is transmitted. The server presents a certificate signed by a trusted certificate authority, enabling the client to verify authenticity. All subsequent HTTP requests and responses are encrypted using the negotiated symmetric key.
Why It Matters
Organisations require encrypted connections to protect sensitive data in transit, comply with regulations such as GDPR and PCI-DSS, and maintain user trust. Search engines prioritise secure sites in rankings, whilst browsers display security warnings for unencrypted connections, creating commercial and user experience incentives.
Common Applications
Financial institutions use HTTPS for online banking and payment processing; healthcare providers protect patient data transmission; e-commerce platforms secure customer transactions and credentials. Content management systems, email services, and government portals universally adopt the protocol.
Key Considerations
HTTPS introduces modest computational overhead and latency during the TLS handshake, though modern optimisations such as session resumption mitigate this. Certificate management, expiration tracking, and organisational PKI infrastructure require operational discipline to prevent service disruption.
Cross-References(1)
More in Networking & Communications
Routing Protocol
Protocols & StandardsA protocol that determines the optimal path for data packets to travel across interconnected networks.
NAT
Protocols & StandardsNetwork Address Translation — a method of mapping one IP address space into another by modifying packet headers.
VPN
InfrastructureVirtual Private Network — a technology creating a secure, encrypted connection over a less secure network like the internet.
SD-WAN
InfrastructureSoftware-Defined Wide Area Network — a virtualised network architecture that enables centralised management of geographically distributed networks.
DHCP
Protocols & StandardsDynamic Host Configuration Protocol — automatically assigns IP addresses and network configuration to devices.
SSL/TLS
Protocols & StandardsSecure Sockets Layer/Transport Layer Security — cryptographic protocols providing secure communication over a computer network.
Network Monitoring
Protocols & StandardsThe practice of continuously observing a computer network for slow or failing components.
Network Topology
Protocols & StandardsThe arrangement of elements such as nodes, links, and devices in a computer network.