Cryptography

Digital Certificate is essentially two files: private key and the public key. These files are issued and signed by the CA.

When the client browser receives the web server's digital certificate, the browser verifies it with its internal CA list. If the certificate is okay, the browser will then compute a one-time session key and send it back to the server. This session key will be encrypted with the web server's public key. The subsequent traffic between the client and the server will then be encrypted with this session key.

SSL uses stream mode symmetric cipher RC4.

# posted by - H - @ 7:38 PM