Overview
Direct Answer
HTTPS is the encrypted version of HTTP that layers the TLS (Transport Layer Security) protocol over standard HTTP communication, ensuring data confidentiality, integrity, and server authentication. It uses asymmetric cryptography during handshake and symmetric encryption for subsequent session data.
How It Works
The protocol initiates a TLS handshake where the client and server exchange certificates and agree on encryption algorithms before any application data is transmitted. The server presents a certificate signed by a trusted certificate authority, enabling the client to verify authenticity. All subsequent HTTP requests and responses are encrypted using the negotiated symmetric key.
Why It Matters
Organisations require encrypted connections to protect sensitive data in transit, comply with regulations such as GDPR and PCI-DSS, and maintain user trust. Search engines prioritise secure sites in rankings, whilst browsers display security warnings for unencrypted connections, creating commercial and user experience incentives.
Common Applications
Financial institutions use HTTPS for online banking and payment processing; healthcare providers protect patient data transmission; e-commerce platforms secure customer transactions and credentials. Content management systems, email services, and government portals universally adopt the protocol.
Key Considerations
HTTPS introduces modest computational overhead and latency during the TLS handshake, though modern optimisations such as session resumption mitigate this. Certificate management, expiration tracking, and organisational PKI infrastructure require operational discipline to prevent service disruption.
Cross-References(1)
More in Networking & Communications
NAT
Protocols & StandardsNetwork Address Translation — a method of mapping one IP address space into another by modifying packet headers.
Proxy Server
InfrastructureAn intermediary server that forwards requests between clients and other servers, providing security and caching.
Network Orchestration
Protocols & StandardsThe automated coordination and management of network resources, services, and policies across infrastructure.
mTLS
Protocols & StandardsMutual Transport Layer Security — a protocol where both client and server authenticate each other using certificates.
Packet Sniffing
Protocols & StandardsThe process of capturing and analysing data packets travelling across a network for monitoring or troubleshooting.
VPN
InfrastructureVirtual Private Network — a technology creating a secure, encrypted connection over a less secure network like the internet.
DHCP
Protocols & StandardsDynamic Host Configuration Protocol — automatically assigns IP addresses and network configuration to devices.
SD-WAN
InfrastructureSoftware-Defined Wide Area Network — a virtualised network architecture that enables centralised management of geographically distributed networks.