CSEComputer Science & Engineering MapThe connected map of computing knowledge and engineering careers.
Show in graph
SEC

Software → Security

HTTPS

HTTP secured with TLS to provide encrypted and authenticated web communication.

Where it fits

HTTPS is HTTP carried over TLS. It is central to web applications, APIs, authentication flows, cookies, certificates, and secure client-server communication.

Mental model

HTTP describes the application conversation. TLS protects the conversation by authenticating the server and encrypting traffic between client and server.

Example

When a browser visits https://example.com, it validates the server certificate, negotiates encryption, and then sends HTTP requests inside the protected channel.

Common mistakes

  • Calling HTTPS a different application protocol from HTTP.
  • Confusing SSL with modern TLS.
  • Assuming HTTPS solves authorization or application-level security.

HTTP, TLS, SSL, digital certificate, certificate authority, authentication.