In a recent LinkedIn post, Chirag Goswami breaks down the essential workings of HTTPS, shedding light on the technology that underpins secure online interactions. Goswami emphasizes the critical role HTTPS plays in protecting user data and maintaining trust in the digital realm.
The Pillars of HTTPS Security
Chirag Goswami highlights three core benefits that HTTPS provides to users and businesses alike. These, according to Goswami, are the foundational elements that make web communication secure:
“Secure Communication – Encrypts data between client and server”
This encryption, as Goswami explains, scrambles data so that even if intercepted, it remains unreadable to unauthorized parties. Beyond just scrambling data, Goswami points out the importance of verifying the identity of the server a user is communicating with. This leads to the second key provision:
“Authentication – Verifies server identity with certificates”
Goswami notes that this verification process is crucial for preventing man-in-the-middle attacks and ensuring users are interacting with legitimate websites. The third pillar, data integrity, ensures that the information exchanged remains unaltered:
“Data Integrity – Ensures data isn’t altered in transit”
In Goswami’s view, these three aspects—security, authentication, and integrity—are indispensable for any modern web service handling sensitive information.
The Technical Journey of an HTTPS Connection
Goswami further elaborates on the step-by-step process involved in establishing an HTTPS connection. This technical breakdown aims to demystify the seemingly complex handshake that occurs behind the scenes:
1. TCP Handshake
The process begins with a standard Transmission Control Protocol (TCP) handshake, as Chirag Goswami outlines, which establishes the initial network connection between the client (your browser) and the server.
2. Certificate Check
Following the TCP handshake, Goswami explains the critical step of certificate verification. The server presents its SSL/TLS certificate to the client, which the client then checks to confirm the server’s authenticity and validity. This is where the browser confirms that the website is who it claims to be.
3. Key Exchange
Once authenticity is confirmed, Goswami details the key exchange. This phase uses asymmetric encryption to securely share a session key. This unique key will be used for the duration of the communication session.
4. Data Transmission
Finally, as Chirag Goswami concludes, the actual data transmission occurs using symmetric encryption. This method is significantly faster than asymmetric encryption, making the ongoing secure communication efficient and practical for everyday web use.
The Undeniable Importance of HTTPS
In his concluding remarks, Chirag Goswami reiterates why this robust security protocol is non-negotiable in today’s digital landscape. He states:
“HTTPS protects sensitive information like passwords, payments, and personal data from interception and tampering.”
Goswami’s post serves as a valuable reminder for both technical and non-technical audiences about the fundamental security measures that protect our online activities. The insights shared by Goswami underscore the ongoing need for vigilance and robust security implementations in web development.
📝 About This Content
This article is based on insights shared by Chirag Goswami on LinkedIn.
📅 Originally posted on September 13, 2026 | View original post on LinkedIn →