SSL/TLS operates above TCP (Transport layer) and below application protocols like HTTP (Application layer). It provides secure transport for application data without modifying the transport-layer functionality. In the 4-layer IP model, SSL effectively inserts itself between these two layers.