Cybersecurity glossary
What is HTTPS and TLS?
Also known as: HTTPS, TLS, SSL certificate, HSTS
Definition
HTTPS is HTTP protected by TLS encryption, which keeps data between a browser and a website private and tamper-resistant and confirms the site controls its domain.
Why it matters
The padlock shows the connection is encrypted, not that the site is trustworthy. Site owners should redirect all HTTP to HTTPS, renew certificates automatically, and enable HTTP Strict Transport Security (HSTS) so browsers always use HTTPS.
Common questions about HTTPS and TLS
- Does the padlock (HTTPS) mean a website is safe?
- Is a free SSL/TLS certificate good enough for a business website?
- Is it safe to use public Wi-Fi?
- Do I need a VPN?
- Does incognito or private browsing mode hide what I do online?
- What are HTTP security headers and which ones should my website have?
- How can I check if my website is secure?
- How do I secure a WordPress website?
See also
Sources
Related Guides
GuideSmall Business Security
Small Business Cybersecurity Checklist: The Core Controls
A practical small business cybersecurity checklist covering access controls, patching, backups, encryption, and network defense to secure your business.
Read more GuideWeb Security
How to Check Security Headers of a Website
Learn how to check security headers of a website using browser developer tools and terminal commands to defend against clickjacking, XSS, and MIME sniffing.
Read more GuideWeb Security
The eMudhra TLS Certificate Compromise Explained: What Happened, Who Is at Risk and What to Do
Eight eMudhra intermediate certificates were issued with private keys anyone can recover. Learn what that means, who is still exposed and the updates to install now.
Read more GuideGRC
How to Write a Data Retention Policy: A Step-by-Step Guide
Learn how to write a data retention policy that aligns with GDPR and the NIST Privacy Framework. Define schedules, disposal rules, and audit controls.
Read more