Supportsoft Glossary

Secure Web Communication Standard

HTTPS, or "Hypertext Transfer Protocol Secure", is an encrypted, secure version of HTTP (Hypertext Transfer Protocol). Most websites nowadays default to this technology. When using HTTPS, a user's web browser connects to the website's computer (the server) securely by encrypting the information exchanged between them. This helps protect the information being communicated between the user's browser and the website's server from access and/or alteration by unauthorised third parties. To create a secure, encrypted connection, an SSL (Secure Sockets Layer) or TLS (Transport Layer Security) certificate is needed to prove the legitimacy of the website and perform an encryption operation to establish a secure connection.

For a user, HTTPS creates a safe environment in which to transmit sensitive information, including but not limited to login credentials, credit/debit card numbers, and personal information. Most browsers indicate that a website is using HTTPS via a browser-based padlock icon and will warn users if a website does not have proper encryption in place.

In addition to protecting a user's sensitive information, a business that adopts HTTPS can expect to improve its position on search engine result pages, enhance its credibility with potential customers, and meet various compliance standards related to data security. HTTPS is an important first step in protecting against various types of common threats, such as man-in-the-middle attacks and session hijacking.