How HTTPS protects the connection
Before any data is sent, the browser and server establish a TLS connection: they agree on ciphers and exchange keys, and the server presents a certificate. After that all traffic — GET and POST requests, the URL, cookies — travels encrypted. Such a site shows the https scheme and a padlock icon in the address bar.
What HTTPS gives you
Moving to HTTPS solves several problems at once:
- Privacy — traffic cannot be read if intercepted on the network.
- Authenticity — the certificate confirms you are on the real site, not a fake.
- One IP, many sites — the right certificate is selected via the SNI extension.
- SEO and trust — browsers mark plain HTTP as "not secure", and search engines prefer HTTPS.
Today HTTPS is the de-facto standard for any website, not just pages with forms and payments.
