HTTPS uses Transport Layer Security (TLS) encryption to protect data in transit. TLS is a cryptographic protocol that provides secure communication over a computer network. It’s the successor to the Secure Sockets Layer (SSL) protocol.
TLS uses a combination of symmetric and asymmetric encryption to protect data. Symmetric encryption uses the same key to encrypt and decrypt data, while asymmetric encryption uses two different keys, a public key and a private key. The public key is used to encrypt data, and the private key is used to decrypt it.
To establish an HTTPS connection, the client and server first negotiate a session key using asymmetric encryption. Once the session key is established, all data transmitted between the client and server is encrypted using symmetric encryption.
TLS also provides authentication, which allows the client to verify the identity of the server. This is done using a digital certificate, which is issued by a trusted certificate authority.