Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I understand how public key encryption works and I understand how it works into SSL. Server sends encrypted(public) key so I can send it a message but only it knows the private key to decrypt it.

Does the reverse happen? Does my browser send the server a public key to send data back securely or is it not secured?

share|improve this question
add comment

1 Answer

up vote 6 down vote accepted

The public/private key pair is only used to negotiate a symmetric key in SSL. Once the symmetric key has been agreed on, actual user data is encrypted using the symmetric algorithm and that new key. It is not based at all on the public/private key pair.

share|improve this answer
3  
You can get more details on the SSL (TLS) handshake process @ en.wikipedia.org/wiki/… –  voretaq7 Feb 15 '11 at 22:00
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.