WebTCP/UDP 443 Encrypted
Port 443: HTTPS
HTTP over TLS
Encrypted web traffic. HTTP/3 runs over QUIC on UDP 443.
How attackers abuse it
- Encryption hides malware and command-and-control traffic from network tools.
- Weak TLS versions, ciphers or misissued certificates.
- Application flaws are unaffected - HTTPS protects transport, not the app.
How to defend it
- TLS 1.2 or 1.3 only with strong ciphers.
- HSTS and certificate monitoring.
- TLS inspection or endpoint visibility where policy allows.
Exam tip
A padlock means the connection is encrypted, not that the site is trustworthy.