HTTP and other protocols send data in plain text, so anyone on the path could read or change it. TLS adds encryption, integrity checks and proof of the server's identity through certificates. It is what turns HTTP into HTTPS and protects logins, payments and API calls. Say TLS rather than SSL, since SSL is its old, broken predecessor, and remember TLS runs over TCP after the TCP handshake.