All modern browsers support the TLS protocol, requiring the server to provide a valid digital certificate confirming its identity in order to establish a secure connection. It is possible for both the client and server to mutually authenticate each other, if both parties provide their own individual digital certificates.
Note: All major browsers began removing support for TLS 1.0 and 1.1 in early 2020; you'll need to make sure your web server supports TLS 1.2 or 1.3 going forward. From version 74 onwards, Firefox will return a Secure Connection Failed error when connecting to servers using the older TLS versions (Firefox bug 1606734 ).
See also
- Transport Layer Security (Wikipedia)
- RFC 8446 (The Transport Layer Security Protocol, Version 1.3)
- RFC 5246 (The Transport Layer Security Protocol, Version 1.2)
- Transport Layer Security
- Transport Layer Security Cheat Sheet (OWASP)
- Glossary