# What Does Port 443 Do?

> Understand how port 443 carries HTTPS traffic and how DNS, TCP, TLS, and HTTP participate.

Canonical: https://sentryxmonitor.com/learn/networking/port-443/
Last updated: 2026-08-08

Networking and protocol operations

TCP port 443 is the conventional port for HTTPS, where a browser establishes a TCP connection, negotiates TLS, and then exchanges HTTP messages inside the encrypted channel.

Reviewed 2026-08-08 Read-only educational guidance

## Key points

- Port 443 is a convention, not a security guarantee.

- TLS certificate validation happens after TCP connects.

- HTTPS health requires network, TLS, and application checks.

## How does it work?

After DNS resolution, the client connects to port 443. The TLS handshake negotiates protocol parameters and authenticates the server certificate. HTTP requests follow after encryption is established.

## What can go wrong?

The port can be reachable while certificates are expired, hostnames mismatch, TLS versions are incompatible, or the application returns errors.

## How can teams detect the problem?

Check TCP reachability, TLS negotiation, certificate chain and hostname, HTTP status, redirects, and response timing.

## How can teams fix or reduce the problem?

Automate certificate renewal, support modern TLS, redirect HTTP intentionally, and monitor the complete HTTPS path.

## What does a technical example look like?

```
DNS -> TCP 443 -> TLS ClientHello/ServerHello -> certificate validation -> encrypted HTTP request
```

The example uses reserved documentation domains and addresses. Apply the same reasoning to systems you own or are authorized to assess.

## Authoritative technical references

- [RFC 8446: The Transport Layer Security Protocol Version 1.3](https://www.rfc-editor.org/rfc/rfc8446.html)

## How does continuous monitoring help?

A point-in-time check explains the observed state now. [Continuous monitoring](https://sentryxmonitor.com/services/uptime-monitoring/) establishes an expected baseline, repeats the relevant check, and records meaningful state changes so an owner can investigate before a small configuration drift becomes a prolonged security or availability problem. See [Networking](https://sentryxmonitor.com/learn/networking/) for the surrounding technical context.

## Where does Sentryx Monitor fit?

Sentryx Monitor provides [read-only outside-in discovery](https://sentryxmonitor.com/services/external-attack-surface-monitoring/) and monitoring for public hosts, DNS, HTTPS, TLS certificates, baseline security headers, email-security records, and selected network services. It supports evidence and operational follow-up, but it does not replace authorized penetration testing, authenticated vulnerability assessment, or owner validation.

## Continue learning

- [Internet Networking for Security and Monitoring](https://sentryxmonitor.com/learn/networking/) - The parent networking guide.

- [What Is TCP Port Monitoring?](https://sentryxmonitor.com/learn/networking/tcp-port-monitoring/) - Learn how TCP port monitoring checks service reachability and where it differs from application monitoring.

- [Common Internet-Facing Ports Explained](https://sentryxmonitor.com/learn/networking/internet-facing-ports/) - Understand common public TCP and UDP ports and when exposure deserves review.

- [What Does Port 80 Do?](https://sentryxmonitor.com/learn/networking/port-80/) - Understand port 80, HTTP redirects, and why public websites still monitor cleartext HTTP.

## Related
- [Home](https://sentryxmonitor.com/)