What it means in plain language
HTTPS is a secured version of HTTP that encrypts communication between the user and the server using a TLS certificate.
Where it genuinely helps
HTTPS encrypts HTTP traffic and authenticates the server through a certificate, but it cannot guarantee honest or safe site content.
What to decide before acting
Enforce the secure protocol, fix the complete certificate chain and remove mixed content without disabling browser checks.
How to tell whether it works
Monitor renewals, TLS versions, redirects, HSTS and assets still requested over insecure URLs.
