HTTPS (HTTP Secure) is the secure version of the HTTP protocol, using TLS encryption to protect data exchanged between clients and servers. HTTPS ensures confidentiality, integrity, and authenticity by encrypting traffic, preventing eavesdropping, tampering, or impersonation. Browsers indicate HTTPS with a padlock icon and enforce stricter rules for secure contexts.
Why it matters
Without HTTPS, attackers could intercept or modify sensitive information such as passwords, authentication tokens, or personal data. HTTPS is required for modern browser features like Service Workers, geolocation APIs, and secure cookies.
Examples
A login page that transmits credentials securely or an API endpoint protected with TLS certificates. Lessons like HTTPS and Why It Matters explain how HTTPS protects communication.