HTTPS The server's key is accompanied by a certificate: this certificate has been signed by a "known" authority, the browser accept the certificate only if intended to the visited site, but the user may accept it. this certificate may be signed by an "unknown" authority, the browser doesn't accept the authority, but the user may accept it.