TLS vs VPN

Why they differ

TLS protects one program's connection to one service; a VPN wraps all of a device's traffic in a single protected tunnel.

TLS

Networking

The protocol that wraps data sent over TCP/IP in an encrypted channel after checking the other side's certificate.

Formal

A protocol running on top of TCP/IP that first checks the other side's identity through its digital certificate, agrees on shared secret keys, and then uses encryption to keep data private and unaltered in transit. It replaced the older SSL; version 1.3 is current.

In plain English

Like sending your letters in a locked, sealed case, after first checking the person receiving it is really who they claim to be.

In practice

A municipality's IT operations manager is warned that the TLS certificate on the citizen self-service site expires in ten days; she renews it, since otherwise citizens' browsers would show a security warning and many would give up.

Why it matters

Without it, anyone on the same wifi or along the route could read or change passwords and personal data as they pass.

VPN

Networking

An encrypted tunnel across a public network that makes a distant device act as if it were inside a private one.

Formal

A technique that wraps a device's packets inside encrypted packets sent to a device at the far end, giving it a private connection to a network it is not physically attached to.

In plain English

Like a private, sealed tunnel from your home straight into the office building, so the walk through the busy public street no longer matters.

In practice

A civil servant at a ministry, working from home, connects to the ministry's VPN and confirms with MFA before she opens the internal case system.

Why it matters

It lets staff use internal systems safely from anywhere, but once inside, a user often reaches far more than they need - a weakness Zero Trust aims to fix.

Shared connections

Encryption Symmetric encryption Confidentiality