An SSL certificate (Secure Sockets Layer) is a file that encrypts the connection between the user's browser and the website, so the data exchanged cannot be read by third parties. It is what enables HTTPS and the padlock in the address bar.
How SSL works
When you visit a site over HTTPS, the SSL certificate starts an encrypted connection: information (passwords, card details, forms) travels in a form unreadable to anyone who intercepts it. Technically today the TLS protocol is used, an evolution of SSL, but the name "SSL" has stuck in common use. The certificate is tied to your domain and verified through the DNS.
Why SSL is essential
- Security: it protects users' sensitive data.
- Trust: the padlock reassures visitors; a "Not secure" site drives them away.
- SEO: Google favours HTTPS sites in search results.
How to get an SSL certificate
Many providers offer free certificates (Let's Encrypt) that renew themselves; for e-commerce and companies there are more advanced certificates. In our hosting SSL is included and correctly configured, with automatic redirection to HTTPS.
Related terms: DNSDomainHosting
Frequently asked questions
Are SSL and HTTPS the same thing?
They are related but not identical. SSL (now TLS) is the certificate that encrypts the connection; HTTPS is the site protocol that uses that certificate. In practice, without SSL there is no HTTPS.
Is an SSL certificate free?
It can be. Let's Encrypt offers free, automatic certificates suitable for most sites. Paid certificates add warranties and validation of the company's identity.
What happens if a site has no SSL?
The browser shows a 'Not secure' warning, users trust it less and Google may penalise its ranking. For an e-commerce it is a serious problem that reduces sales.