HTTPS (short for HyperText Transfer Protocol Secure) is the secure version of HTTP — the protocol that lets your browser talk to websites. The “S” stands for secure, and it means your connection is encrypted.
Originally from the world of networking, HTTPS adds a layer of SSL/TLS encryption to protect your data from hackers or snoops. Without HTTPS, anyone on the same network (say, at a coffee shop) could potentially spy on the data you’re sending — like passwords or credit card info. With HTTPS, that data is scrambled into gibberish that only the intended site can read.
You’ve seen it: the little padlock icon next to a website’s address. That means the site uses HTTPS. It’s now the standard for any serious website, especially those that handle user data. Google even penalizes sites that don’t use it.
HTTPS protects you — the user — but also builds trust. If you’re running a site, it’s non-negotiable. And if you’re a user, you should always think twice before entering info on a site that doesn’t have that padlock.
Want the deep dive? Check out Let’s Encrypt, a free SSL certificate authority.
« Back to Glossary Index