SSL Protocol

The SSL sublayer sits between the application layer and sockets. SSL sockets aren’t limited to HTTP protocol use.

The process works in four steps:

First, negotiate the encryption algorithm.

Second, authenticate the server. The server sends its certificate. The client verifies it using the CA’s RSA public key.

Third, calculate the session key. Use a random secret number as the symmetric key. Encrypt it with the server’s public key and send it.

Fourth, transmit data securely.