Recall that TCP can be enhance

Recall that TCP can be enhanced with SSL to provide process-to-process security services, including encryption Does SSL operate at the transport layer or the application layer? If the application developer wants TCP to be chanced with SSL, what does the developer have to do?