If you run a site you’ve been told you need one; if you just browse, it’s what makes the padlock appear. It’s an ID badge for a website, and it proves less than people assume.
If you run a website, you have been told you need one of these. If you just use the web, it is the thing quietly making that padlock appear. An SSL certificate sounds technical and official, and it is, but the idea behind it is something you already understand: it is an ID badge for a website.
An SSL certificate is a digital ID badge a website carries. It proves the site really controls the address you are visiting, and it switches on the encryption that keeps your connection private. It does not prove the people behind the site are honest.
Think of how a visitor badge works at an office. You do not just print your own and walk in. Someone at the front desk verifies you first, then issues a badge that others can trust at a glance. A certificate works the same way. A trusted outside party, called a Certificate Authority, checks that whoever is asking really controls that web address, then issues a certificate saying so. Your browser knows the trusted authorities, so when a site presents a valid badge, the browser accepts it without you having to verify anything yourself.
That badge does two useful jobs. It confirms you are really connected to the address in the bar and not being quietly rerouted, and it turns on encryption so nobody in between can read what passes between you. That is the whole reason the padlock shows up. In fact, the certificate is the machinery behind the padlock we talk about in the piece on HTTPS.
An SSL certificate proves a site controls its address and turns on encryption. It says nothing about whether the site is run by good people.
Here is the part worth tattooing on your brain. A certificate ensures the connection is secure. It does not guarantee the site is honest. Certificates are cheap and easy to get now, so a scam site can hold a perfectly valid one and show you the same reassuring padlock as your bank. News flash: scammers lie, and a lie over an encrypted connection is still a lie.
One short email: the scam making the rounds, one tech word made simple, and one tip to keep you and your family safe. Free, no spam, unsubscribe anytime. Plus a free printable "How to Spot a Scam" sheet for your fridge.
We send one email to confirm it's really you. Your address stays with us and our email service, nobody else. Privacy
The cloud isn't in the sky. It's in giant, humming, refrigerated warehouses full of computers, and they're hungry for electricity and water. Here's what a data center is.
New phones are ditching the little SIM card tray. An eSIM is the same thing, built in and programmed over the air, like a hotel updating your key card without a trip to the front desk.
Click every traffic light. Now do it again. CAPTCHAs are bouncers that keep robots out, and if you keep failing them, the problem is probably your connection, not you.
