TLS (Transport Layer Security) sits between TCP and the application protocol. After a handshake the two sides share keys, the client has checked the server’s certificate, and all data is encrypted and tamper-evident. HTTPS is HTTP over TLS.