SSL/TLS

TLS encrypts traffic between browsers, servers and APIs; HTTPS-everywhere is baseline for players, partners and search engines alike.

The tracking-chain specifics

Certificate hygiene on tracking domains is operationally load-bearing: an expired cert on the redirect fleet doesn’t degrade — it stops clicks entirely, silently, per browser warning screen (automate renewal; alert on expiry horizons). Mixed-content breaks postbacks and pixels; HSTS preload protects brand domains; and internal API traffic deserves the same encryption discipline as public surfaces. TLS is invisible until it isn’t, and its failures are always measured in lost attribution and support storms.