HTTPS mung HTTP sing mlaku ing njero saluran sing dienkripsi TLS. TLS (Transport Layer Security) mènèhi sampeyan telu jaminan: confidentiality (trafik dienkripsi), integrity (ora bisa diutak-atik tanpa kedeteksi), lan authentication (sampeyan pancèn omong-omongan karo server sing kasebut ing certificate). Iki dirundhingaké ing sawijining handshake sadurungé ana HTTP sing dikirim:
text
Client Server
│──── ClientHello ──────────────────────▶│ (TLS versions, cipher suites, random)
│◀─── ServerHello + Certificate ─────────│ (chosen cipher + cert with public key)
│ │
│ verify cert against a trusted CA │
│ agree on keys (e.g. ECDHE key exchange)│
│ │
│──── Finished (encrypted) ──────────────▶│
│◀─── Finished (encrypted) ───────────────│
│========= encrypted application data ====│ (now HTTP flows, encrypted)