SSL/TLS Basics | Vinayak

SSL/TLS Basics

Understanding HTTPS, certificates, and secure communication

What is SSL/TLS?

SSL was the predecessor to TLS. Modern websites use TLS to encrypt communication between a browser and a web server.

HTTP vs HTTPS

HTTP: Communication is not encrypted by TLS.

HTTPS: HTTP runs over TLS, helping protect data from interception and tampering.

What is an SSL/TLS Certificate?

A certificate helps a browser verify a website's identity. It contains information such as the domain name, issuer, validity period, and public key.

This website uses a certificate issued by Let's Encrypt.

How HTTPS Works

  1. Your browser connects to the website over HTTPS.
  2. The server presents its TLS certificate.
  3. The browser checks the certificate and domain.
  4. TLS establishes secure session keys.
  5. Browser and server exchange encrypted HTTP data.

Public Key and Private Key

The certificate contains the server's public key. The corresponding private key stays on the server and must be kept secret. TLS uses cryptographic mechanisms to establish secure communication.

Certificate Details

Domains: vinayak.site, www.vinayak.site

Certificate authority: Let's Encrypt

Web server: Nginx

HTTPS status: Configured