ENCRYPTED CONNECTIONS

What does HTTPS actually do?

HTTPS encrypts the connection between a visitor's browser and the web server and helps the browser verify which hostname it is talking to. It does not prove that the website owner is trustworthy or that the application itself is secure.

The certificate belongs to the hostname

A TLS certificate covers one or more domain names. If you move a website to a new host, the new environment needs a valid certificate before visitors can connect securely there.

Modern hosts often automate certificates

Many hosting platforms issue and renew certificates automatically. That removes routine certificate management, but the DNS still needs to point to the right place for validation and traffic.

HTTPS is not the same as owning the domain

You can own a domain without a working certificate, and you can have hosting ready before DNS points to it. Domain registration, DNS, hosting and TLS are separate layers.

HTTPS does not secure a vulnerable application

Encryption protects data in transit. It does not fix weak passwords, outdated plugins, insecure server configuration or application bugs.