SSL/TLS
SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are cryptographic protocols that encrypt the communication between a web browser and a server. Although SSL is technically obsolete and has been replaced by TLS, the term SSL continues to be used colloquially.
In e-commerce, TLS/SSL is the basic requirement for secure payments. An SSL certificate activates the HTTPS protocol (recognisable by the padlock symbol in the browser) and encrypts all transmitted data — including payment information, personal data and login credentials.
A valid SSL/TLS certificate is mandatory for online shops: without HTTPS, browsers warn against the website, search engines downgrade it, and PCI DSS compliance is not possible. Most hosting providers and PSPs offer free SSL certificates (e.g. via Let's Encrypt).
SSL/TLS Examples
An online shop activates an SSL certificate. The browser displays a padlock symbol, and all data is transmitted in encrypted form.
A payment gateway transmits credit card data via a TLS 1.3-encrypted connection between the browser and the server.
A hosting provider provides free SSL certificates via Let's Encrypt — you, as the shop operator, do not have to worry about manual renewal.
SSL/TLS FAQ
What is SSL/TLS?
SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are encryption protocols for secure data transmission over the Internet. TLS is the current standard, but the term SSL continues to be used colloquially.
Do you need SSL for your online shop?
Yes, absolutely. Without an SSL/TLS certificate (HTTPS), browsers will warn against your website, search engines will downgrade it, and the processing of payment data is not PCI DSS-compliant.
How much does an SSL certificate cost?
Basic SSL certificates (e.g. via Let's Encrypt) are free of charge. Extended Validation (EV) certificates, which display the company name in the address bar, cost CHF 100–500 per year.
What is the difference between SSL and TLS?
TLS is the successor to SSL and offers stronger encryption. SSL (Version 3.0) is considered outdated and insecure. In practice, the terms are often used synonymously, but almost always refer to TLS.
