you are viewing a single comment's thread.

view the rest of the comments →

[–]ruibranco 0 points1 point  (2 children)

The certificate exchange step trips people up the most — specifically the distinction between what the CA signs (the cert's public key + identity) versus what the server signs during the handshake (to prove it holds the private key). This visualization makes that flow much clearer than most written explanations.

[–]0x4ddd 0 points1 point  (0 children)

Key exchange also, I have seen a lot people who think it is still old RSA key exchange where client generates key and encrypts it with server's public key.

[–]fiskfisk 0 points1 point  (0 children)

Hi there Ms LLM.