Runs on TCP port 443 Provides Frame encryption for the Application Layer. TLS has largely replaced SSL.