SSL/TLS connections are formed when a browser attempts to access a website that is powered by SSL/TLS. This sequence is known as SSL/TLS Handshake. This secure connection established by the SSL/TLS handshake allows the client that is used by the user (e.g., or a web browser) as well as a webserver to create secure connections through the exchange of secret keys that encrypt and decrypt the communication. The SSL/TLS handshake happens immediately and is not visible to the end-user.
Here’s a complete explanation of how SSL/TLS functions:
- When a browser tries to access a website (webserver) it first asks the server to authenticate itself.
- Then the webserver will send an electronic copy of the SSL/TLS certificate as well as the public key.
- During the handshake SSL/TLS the browser validates the authenticity that is in the SSL certificate. Also, it validates the site properly by verifying the name of the website and comparing it to what the website is connected to.
- SSL certificate is made up of the private key and public key, which manage encryption and decryption in the SSL/TLS handshake that allows for encrypted communication. After the browser has verified that it is trustworthy and trusted, a third key, referred to as a “session key” is generated by the browser with its server’s private key.
- After that, the session key is transmitted through the servers. This session key can be described as an asymmetric one which is a highly effective method of encryption that allows for rapid communications.
- The server decrypts the received session key, and then sends an email with the session key encrypted.
- Finally it is encrypted and a secure connection is created between the user (e.g. or a web browser) and the webserver at the conclusion in the process of a handshake. They can now connect in a safe environment by using the session keys provided. The typical handshake for SSL/TLS takes less than 1 second.
