What is SSL?#

SSL, and its modern successor TLS, is a method for encrypting the data exchanged between a browser and a server. An SSL certificate is a file installed on the server that both enables encryption and shows that the site really belongs to that domain.

Why is it needed?#

  • Without it, passwords and form data can be intercepted in transit.
  • Browsers mark sites without HTTPS as "not secure".
  • Payments and user logins are unacceptable without it.
  • Google treats HTTPS as a minor positive signal, and user trust rises too.

Types#

  • Free (such as Let's Encrypt): enough for most sites
  • Commercial: with support and sometimes stronger validation
  • Wildcard: one certificate for all subdomains

Example#

When you open your bank's site, you see the address starts with https and has a padlock. That means your conversation with the server is encrypted.

How do we enable it?#

Most hosts have an automatic SSL installer in the control panel. After installing, you move the site to https, add a redirect, and fix old links.

Common mistake#

Thinking SSL means the site is trustworthy. SSL only encrypts the connection and says nothing about the honesty of the site's owner; a scam site can have https too.