GlossaryProtocolsBeginner

HTTPS

HTTPS is the secure version of HTTP that encrypts data between your browser and a website using SSL/TLS. It prevents eavesdroppers from reading or tampering with the traffic.

Last updated June 8, 2026

Definition

HTTPS (Hypertext Transfer Protocol Secure) is HTTP layered on top of SSL/TLS encryption. It scrambles the data exchanged between a browser and a server so that no one in between - your ISP, a network attacker, or a malicious proxy - can read or alter it. The padlock icon in your browser indicates an active HTTPS connection.

How it works

When you connect to an https:// site, the client and server perform a TLS handshake, verify the site's certificate, and agree on encryption keys. All subsequent requests and responses, including headers and content, are encrypted in transit.

Why it matters for privacy and proxies

  • Encrypted relay - an HTTP proxy uses the CONNECT method to tunnel HTTPS traffic without decrypting it, preserving end-to-end security.
  • Privacy - HTTPS hides page paths and content from intermediaries, though the destination domain may still leak via DNS or SNI.
  • Scraping - nearly all modern sites use HTTPS, so scrapers must handle TLS and may face TLS fingerprinting.

HTTPS is the baseline of web security, and understanding it helps you reason about what proxies can and cannot see in your traffic.

Examples

1

A browser showing a padlock icon after completing a TLS handshake with a bank's website

2

An HTTP proxy using the CONNECT method to tunnel encrypted HTTPS traffic

3

A scraper presenting a TLS fingerprint that matches a real Chrome browser

Common Use Cases

Ensuring sensitive data stays encrypted between client and server in transit
Tunneling HTTPS traffic through a proxy without exposing the content
Understanding what an intermediary proxy can and cannot see in your requests
Handling TLS handshakes and fingerprinting when scraping modern websites

Frequently Asked Questions

HTTP sends data in plain text, while HTTPS encrypts the same traffic using SSL/TLS so intermediaries cannot read or tamper with it.
A standard proxy tunnels HTTPS using the CONNECT method and cannot read the encrypted content, though it can see the destination domain you are connecting to.
Yes. Almost all modern sites use HTTPS, so scrapers must complete TLS handshakes and may need to manage TLS fingerprints to avoid detection.
What Is HTTPS? Secure HTTP with SSL/TLS Explained | ProxyHorizon | ProxyHorizon