SSL/TLS Handshake

Cryptography · Axiom Academy

How public key cryptography secures every HTTPS connection you make What Happens When You Visit https:// Every time you type a URL starting with https:// into your browser—whether it's your bank, email, or social media—an invisible security handshake happens in milliseconds. This is the TLS (Transport Layer Security) handshake , and it's one of the most important applications of public key cryptography in the modern world. That little lock icon means your connection is secure. But what does "secure" actually mean? Did you know? Over 95% of web traffic is now encrypted using HTTPS. Without the TLS handshake, anyone on your WiFi network could see your passwords, credit card numbers, and private messages! Let's explore the fascinating cryptographic dance that happens behind the scenes to keep your data safe. Before diving into the solution, let's understand the problem. When you connect to a website, you need to establish a secure, encrypted communication channel. But there's a catch: To send encrypted messages, you need a shared secret key. But how do you securely share that key when the entire internet can see your initial communication? Think about it: If you want to send an encrypted message to a website you've never contacted before, how can you agree on a secret key? The TLS Solution: Hybrid Encryption The TLS handshake solves this problem brilliantly by using hybrid encryption —combining the strengths of both public key and symmetric cryptography:

This is the written version of the interactive lesson above. See the full Cryptography course.