Overview
Direct Answer
SSL/TLS is a pair of cryptographic protocols—Secure Sockets Layer (now deprecated) and its successor Transport Layer Security—that establish encrypted communication channels between clients and servers over untrusted networks. TLS remains the industry standard for protecting data in transit, authenticating endpoints, and preventing eavesdropping and tampering.
How It Works
TLS employs a handshake mechanism where client and server negotiate cipher suites, exchange certificates for authentication, and derive shared encryption keys using asymmetric cryptography. Once the handshake completes, application data flows through a symmetric encryption tunnel, with each record authenticated using message authentication codes to detect tampering.
Why It Matters
Organisations require cryptographic protection of sensitive data to meet regulatory compliance (GDPR, HIPAA, PCI-DSS), prevent credential theft, and maintain customer trust. Modern web commerce, banking, and healthcare infrastructure depend on widespread deployment; absence creates significant breach liability and reputational risk.
Common Applications
HTTPS for web browsing, email protocols (SMTPS, IMAPS), VPN tunnels, API communications, and database connections all employ TLS encryption. Financial institutions, healthcare providers, and e-commerce platforms rely on it to secure customer transactions and personal data.
Key Considerations
Certificate management complexity, CPU overhead during handshakes, and version deprecation (SSL 3.0 and earlier remain cryptographically broken) require ongoing operational maintenance. Misconfiguration—weak ciphers, expired certificates, or incorrect hostname validation—remains a common vulnerability vector despite protocol strength.
Cross-References(1)
More in Networking & Communications
VPN
InfrastructureVirtual Private Network — a technology creating a secure, encrypted connection over a less secure network like the internet.
SD-WAN
InfrastructureSoftware-Defined Wide Area Network — a virtualised network architecture that enables centralised management of geographically distributed networks.
Network Resilience
Protocols & StandardsThe ability of a network to maintain acceptable service levels despite faults, challenges, and threats.
Packet Sniffing
Protocols & StandardsThe process of capturing and analysing data packets travelling across a network for monitoring or troubleshooting.
mTLS
Protocols & StandardsMutual Transport Layer Security — a protocol where both client and server authenticate each other using certificates.
VLAN
InfrastructureVirtual Local Area Network — a logical grouping of network devices that communicate as if on the same physical network.
DHCP
Protocols & StandardsDynamic Host Configuration Protocol — automatically assigns IP addresses and network configuration to devices.
Quality of Service
Protocols & StandardsNetwork management techniques that prioritise certain types of traffic to ensure consistent performance.