What is HTTPS?

HTTP encrypted with TLS — the protocol that keeps your web traffic private and tamper-proof in transit, indicated by the padlock and https:// in the address bar.

How it works

Without HTTPS, anyone on the network path can read and alter traffic. It authenticates the server (via certificate) and encrypts the connection. On a hardened workstation it's the baseline assumption for everything you do in a browser.

Example

In practiceYou verify a site uses a valid https:// certificate before entering any credential — a padlock alone isn't enough if the domain is wrong.

Does a padlock mean a site is safe?

It means the connection is encrypted, not that the site is honest. A phishing site can have a valid padlock — always check the domain.

Go deeper: Build a Hardened Linux Workstation

The complete, step-by-step guide — every command, config, and the reasoning behind it.

Get the guide