SSL/TLS works to secure communications over the internet by encrypting data transferred between clients and servers. When a user connects to a secured website, SSL/TLS establishes a safe channel through a process called the handshake, which authenticates the parties involved. This process involves exchanging security certificates and negotiating encryption algorithms. Once established, information, such as login credentials or personal data, is transmitted securely, mitigating risks of eavesdropping or tampering during transmission, thereby ensuring user privacy and data integrity.