Stage 1 · Lesson 3 of 7

HTTPS and certificates

scrambles (encrypts) everything sent between the visitor and the server, so nobody in between can read it. It works through a certificate issued for the domain. The technology is called TLS, though people still call it SSL.

Shopify, Webflow and most WordPress hosts give free certificates, often from Let's Encrypt. They renew them automatically once points to the right place. Browsers mark plain pages as not secure.

Login and payment forms must never travel unencrypted, so every site you build should force HTTPS. After switching, check that all images, scripts and fonts also load over HTTPS.

Common trap: old http:// links inside page content or settings, which show warnings or break parts of the page even though the certificate itself is fine.

A question to check yourself, an AI practice session and 1 cheat sheet entry come with the full roadmap. Unlock

Resources for this stage

Start with· follow one of these

GuideFree
MDN Web Docs
Mozilla
Free, accurate learning area for HTML, CSS and how the web works; the reference every builder keeps open
GuideFree
W3Schools
W3Schools · Beginner
Short beginner examples of HTML and CSS you can edit in the browser straight away

Practise

Frontend Mentor
Free designs to rebuild in HTML and CSS, so you practise turning a mockup into a real page

Keep handy

Can I Use
Check whether a CSS feature works in the browsers your client's customers use

Also worth your time

web.devGo deeper
Google's guides on responsive design, images and performance for when the basics feel solid