Glossary

SSL / TLS

The protocol that encrypts traffic between your browser and a website.

Definition

SSL is the older name; TLS (Transport Layer Security) is the modern protocol. Either way, the padlock in your address bar means your connection to the site is encrypted in transit and the site has presented a valid certificate proving it owns the domain.

TLS protects against eavesdropping and tampering by anyone between you and the server. It does not say anything about the site's intentions — phishing sites use TLS too. The takeaway: TLS is a baseline, not a trust signal on its own.

Example

You visit https://example.com. Your browser and the server perform a TLS handshake, agree on encryption keys, and the site loads. Anyone watching the network sees only encrypted bytes.

Frequently asked questions

Is HTTPS the same as TLS?

HTTPS is HTTP running over TLS. Same thing for practical purposes.

Why do small sites still need TLS?

Browsers warn on plain HTTP, login fields don't work safely without it, and certificates are free via Let's Encrypt.