What is SSL / TLS?

Transport Layer Security (TLS) is the encryption protocol that protects web traffic. TLS is the successor to SSL (Secure Sockets Layer), though people still say SSL colloquially. TLS 1.2 and 1.3 are the current versions; TLS 1.0 and 1.1 are deprecated and should be disabled.

In more detail

TLS does three things: it encrypts the connection so eavesdroppers cannot read traffic, it authenticates the server with a certificate, and it ensures traffic is not tampered with. A misconfigured TLS setup (expired certificate, weak ciphers, old protocol version) can fail any of these.

Most managed platforms (Vercel, Cloudflare, Netlify) handle TLS automatically with free certificates from Let's Encrypt. Self-hosted deployments need certbot or similar to keep certificates fresh.

Why this matters

Why builders care

An expired certificate breaks your site — every browser shows a full-screen warning. For managed hosts this is rare, but custom domain setups can fail silently. Use a monitoring tool to alert you 14+ days before expiry.

See where your site stands

Paste a URL, get a score in 60 seconds. Free, no signup.