What method ensures confidentiality of communications between a web browser and a server?

• A. SSH
• B. IPsec VPN
• C. HTTPS/TLS encryption
• D. DNS over HTTPS

Answer: (C)

Confidentiality for web traffic is achieved by encrypting the data as it travels between the browser and the server. HTTPS uses TLS to establish a secure, end-to-end channel. During the TLS handshake, the client and server authenticate each other (the server proves its identity with a certificate) and agree on a session key. All HTTP requests and responses—including headers and bodies—are then encrypted with that key, so even if someone on the network eavesdrops, they can't read the content.

Other options don’t provide this same, browser-to-server confidentiality in the standard web browsing flow. SSH is meant for secure remote login, not regular web traffic. An IPsec VPN can protect traffic by encrypting packets, but it operates at the network level and typically requires a VPN setup, not the browser’s normal operation. DNS over HTTPS encrypts domain name lookups, but it doesn’t hide the actual content of the web traffic itself. HTTPS/TLS encryption covers the full web communication, which is why it’s the correct choice.