Overview: Connection security
Connection security relates protected transport, endpoint identity and browser-enforced request boundaries.
HTTPS can protect a connection while the client still needs to validate the intended endpoint. TLS termination locates that protection on a particular leg, and browser rules add another boundary around requests made by a page. This branch gives those checks their own context instead of treating one secure URL as proof of the whole path.
HTTPS and TLS
HTTPS uses TLS to protect an HTTP connection and verify the intended peer, with routing, handshake validation and application login forming distinct stages.Certificate validation and lifecycle
Certificate validation and lifecycle connect public identity evidence, trust paths, requested names and deployed certificate state.TLS termination
TLS termination identifies the endpoint that decrypts protected records and handles the resulting application data, with any forwarded connection carrying its own protection and peer identity.Browser security boundaries
Browser security boundaries govern when a page can request or read resources from another connection or origin.