HTTPS is normal web traffic (HTTP) plus TLS encryption. It protects data in transit and helps prove you're talking to the real server.

Certificates are files signed by a trusted authority (e.g. Let's Encrypt). Your browser shows a padlock when TLS is valid.

Self-signed certs work on internal networks but browsers warn unless you install your own trust anchor.

Homelab pattern: automate renewal (ACME) at the reverse proxy so certificates rotate before expiry.

• ← Concepts index