SSL (Secure Sockets Layer)

Definition

• SSL (Secure Sockets Layer) is a security technology that encrypts data traveling between a user's browser and a web server.
• Its role is to make communication private, secure, and trustworthy after the browser has found the website's server through DNS.
• In the flow, it comes after DNS resolution and before data exchange.
• Key terms: SSL Certificate, HTTPS, Encryption, Public Key, Private Key, TLS (modern replacement for SSL).

What Problem It Solves

• Prevents hackers from reading sensitive information during transmission.
• Verifies that the user is communicating with the correct website.
• Protects passwords, payment details, forms, cookies, and API requests.

What Happens If Not Used

• Data travels as plain text and can be intercepted.
• Browsers show "Not Secure" warnings.
• Login credentials and customer data become vulnerable.
• Many modern browser features and payment systems may stop working.

Easy Wording

SSL puts a locked, private tunnel between your visitor and your website.

Layman Example

Imagine sending a letter:

• Without SSL → Postcard; anyone can read it.
• With SSL → Locked envelope; only the intended recipient can open it.

Technical Example

Without SSL

• User enters example.com.
• DNS finds the server IP.
• Browser connects to the server.
• Username/password travel in readable form.
• An attacker on the network could capture the data.

With SSL

• User enters https://example.com.
• DNS finds the server IP.
• Browser connects to the server.
• Server sends its SSL Certificate.
• Browser verifies the certificate.
• Encryption keys are exchanged.
• Secure HTTPS connection is established.
• Login credentials, forms, and API data travel encrypted.

Flow: Domain → Nameserver → DNS Records → IP Address → Server → SSL Certificate Verification → Encrypted HTTPS Communication.