{"id":30121,"date":"2024-11-12T12:39:23","date_gmt":"2024-11-12T12:39:23","guid":{"rendered":"https:\/\/www.seobility.net\/en\/blog\/wiki\/transport-layer-security\/"},"modified":"2025-05-22T08:33:02","modified_gmt":"2025-05-22T08:33:02","slug":"transport-layer-security-tls","status":"publish","type":"wiki","link":"https:\/\/www.seobility.net\/en\/wiki\/transport-layer-security-tls","title":{"rendered":"Transport Layer Security"},"content":{"rendered":"

Definition<\/span><\/h2>\n
\n
\"HTTPS\"<\/a> <\/p>\n
Figure:<\/b> HTTPS – Author: Seobility – License: CC BY-SA 4.0<\/a><\/div>\n<\/div>\n<\/div>\n

Transport layer security, often shortened to TLS, is a security protocol that improves the security of online communication. It is used to encrypt, verify and authenticate communication between browsers and servers, among other online communications.\n<\/p>\n

TLS is a critical security layer in the HTTPS<\/a> protocol, often called HTTP over TLS.\n<\/p>\n

What is TLS used for?<\/span><\/h2>\n

Various transport layer security protocols are used online to make secure communication possible. They are used to encrypt the communication on websites, web applications, email clients, and VoIP systems.\n<\/p>\n

TLS helps web developers protect their website users from data theft and fraud by encrypting their communication with the server. This improves the user experience<\/a> and has even become an important ranking factor for major search engines<\/a> over the years.\n<\/p>\n

Most major browsers will display a warning when the communication with a site isn\u2019t encrypted. This can make a site very difficult to access by a user or cause them to reconsider whether a site is safe or not.\n<\/p>\n

TLS certificates<\/span><\/h2>\n

A website needs to have a TLS certificate installed to use transport layer security. These certificates are often called SSL certificates, even though they use TLS instead of SSL.\n<\/p>\n

This certificate contains a public key and information on the domain name it was created for. This information is used for encryption. It confirms that the information was sent by the right party and a third-party hasn\u2019t changed it.\n<\/p>\n

Forcing HTTPS<\/span><\/h2>\n

It\u2019s best practice to force all communication with a site to use the HTTPS version. Forcing HTTPS means that all HTTP versions of the page redirect<\/a> to the HTTPS version, ensuring TLS encryption is used optimally.\n<\/p>\n

This is achieved using the 301 redirect, which is an important HTTP status code<\/a> that moves the user to the preferred version of the page. This forces all website visitors and search engine crawlers<\/a> to use the secure version, improving the user experience of a site.\n<\/p>\n

TLS and page speed<\/span><\/h2>\n

In the past, the use of TLS could negatively impact page speed<\/a>. The use of transport layer security requires computing power and extra server requests, causing loading delays.\n<\/p>\n

Today\u2019s TLS certificates offer improved performance when compared to those provided in the past. This means that if they\u2019re implemented properly without additional redirects, the speed implications are small and are outweighed by the benefits.\n<\/p>\n

Redirect chains<\/span><\/h2>\n

Besides redirecting all users to the secure version of a site, there are also other choices that a web developer has to make regarding the preferred URL<\/a>. Some of these include whether to use the www. version or the non-www. version, as well as whether to use a trailing slash<\/a> or not.\n<\/p>\n

When redirecting to the secure version, all pages must redirect directly to the final destination. If not, redirect chains can occur, as depicted below:\n<\/p>\n

\"Visualization\n<\/p>\n

An example of a redirect chain.\n<\/p>\n

\"Redirect\n<\/p>\n

An image of how to fix the redirect chain by linking all URLs directly to the preferred URL.\n<\/p>\n

The difference between TLS and SSL<\/span><\/h2>\n

TLS is a more recent and more secure version of SSL, the latter of which had become outdated by the start of the twenty-first century. When online shopping started gaining traction, more advanced online encryption was needed.\n<\/p>\n

SSL stands for Secure Socket Layer and is no longer used for the security of online communication. Although SSL isn\u2019t actually used anymore, the term is still used often instead of TLS. An example of this is the SSL certificate, which is the more common name used for a TLS certificate.\n<\/p>\n

Its importance for SEO<\/span><\/h2>\n

Transport layer security is an important part of a site\u2019s security. It allows web developers and SEOs to create a safe environment for visitors, improving the user experience and signaling to search engines that the site is secure.\n<\/p>\n

By forcing the use of HTTPS and correctly implementing 301 redirects, redirect chains can be prevented and link equity<\/a> can be preserved, improving a site\u2019s SEO performance and a page\u2019s speed.\n<\/p>\n

Related links<\/span><\/h2>\n