When a browser connects to an HTTPS site, it performs a “handshake” (the TLS handshake) with the server. During that brief exchange the server presents its SSL certificate, and the browser verifies that it's valid, unexpired and signed by a trusted certificate authority (CA). If verification succeeds, the two sides agree on a shared encryption key and everything from that moment on flows encrypted.

At the heart of that process sits public key cryptography: data encrypted with the public key in the certificate can only be decrypted with the private key on the server. So even if somebody intercepts the traffic (a man-in-the-middle), they can't read it.

Why Did SSL Become Essential?

In 2018 Chrome began marking every non-HTTPS site as “Not secure” in the address bar. Today SSL is effectively mandatory for any site with a form, a login or a payment. On top of that, modern speed protocols such as HTTP/2 and HTTP/3 only work over an encrypted connection, which makes SSL a prerequisite for speed as well as security.

What Does Broken SSL Cost You?

A certificate that has expired, doesn't match the domain or has a missing chain shows visitors a full-page security warning. Most users leave at that screen, and Google pushes insecure pages down. SSL problems usually appear quietly (a certificate isn't renewed, an intermediate is forgotten), which is why regular checks matter.