TCP & TLS handshake

Before any data flows, the browser opens a TCP connection (a three-step handshake) and, for HTTPS, negotiates TLS encryption — extra round trips before the first byte arrives.

An https:// URL means the connection is wrapped in TLS before any HTTP is sent.