Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I understand how public key encryption works and I understand how it works into SSL. Server sends encrypted(public) key so I can send it a message but only it knows the private key to decrypt it.

Does the reverse happen? Does my browser send the server a public key to send data back securely or is it not secured?

share|improve this question
up vote 6 down vote accepted

The public/private key pair is only used to negotiate a symmetric key in SSL. Once the symmetric key has been agreed on, actual user data is encrypted using the symmetric algorithm and that new key. It is not based at all on the public/private key pair.

share|improve this answer
You can get more details on the SSL (TLS) handshake process @… – voretaq7 Feb 15 '11 at 22:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.