SSL/TLS

SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) are encryption protocols that ensure secure data transmission between a browser and a server.

SSL/TLS

SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are cryptographic protocols that encrypt communication between a web browser and a server. Although SSL is technically obsolete and has been replaced by TLS, the term SSL continues to be used colloquially.

In e-commerce, TLS/SSL is the basic prerequisite for secure payments. An SSL certificate activates the HTTPS protocol (recognisable by the padlock icon in the browser) and encrypts all transmitted data — including payment information, personal data and login credentials.

For online shops, a valid SSL/TLS certificate is mandatory: without HTTPS, browsers warn against the website, search engines downgrade it, and PCI DSS compliance is not possible. Most hosting providers and PSPs offer free SSL certificates (e.g. via Let's Encrypt).

SSL/TLS examples

An online shop activates an SSL certificate. The browser displays a padlock symbol, and all data is transmitted in encrypted form.

A payment gateway transmits credit card data via a TLS-1.3-encrypted connection between browser and server.

A hosting provider provides free SSL certificates via Let's Encrypt — the shop operator does not have to worry about manual renewal.

SSL/TLS FAQ

What is SSL/TLS?

SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are encryption protocols for secure data transmission on the Internet. TLS is the current standard; the term SSL continues to be used colloquially.

Do I need SSL for my online shop?

Yes, absolutely. Without an SSL/TLS certificate (HTTPS), browsers will warn visitors about your website, search engines will downgrade your ranking, and the processing of payment data will not be PCI-DSS compliant.

How much does an SSL certificate cost?

Basic SSL certificates (e.g. via Let's Encrypt) are free of charge. Extended Validation (EV) certificates, which display the company name in the address bar, cost EUR 100–500 per year.

What is the difference between SSL and TLS?

TLS is the successor to SSL and offers stronger encryption. SSL (Version 3.0) is considered deprecated and insecure. In practice, the terms are often used synonymously, almost always meaning TLS.