Breaking Down the TLS Handshake

John Wagnon walks through the exchange between the client and the F5 BIG-IP during a TLS handshake.

[RedBlueLabs]

this is the best explanation of TLS I have seen on YouTube

[FahadKashem]

jeus! Finally! thank you. Youtube needs to do a better job of sorting results based on quality.

[calingiurgiu]

finally a guy that explained to my understanding. Thanks man!!!

[vinodcs]

Best tutorial on TLS and SSL on youtube, wasted a lot of time searching for good one, finally ended up with this tutorial. Thank you. Keep up the good work.

[wretchedknave]

Great video John, watched many this one explains it the best so far. So in a nutshell just to confirm:
1.) Client (browser) send an SSL hello to the server. This includes the type of ciphers it supports etc.
2.) Server receives hello and generates a key-pair (A public key and a private key). Server sends the digital certificate to the client with ONLY the public key encrypted in it. Any 'sniffers' listening on the wire will only be able to decrypt the public key if they have the private key (which they do not.)
3.) Client receives the certificate and the public key. It checks the contents of the certificate against its CA database to confirm it is legit.
4.) Client then generates a Pre-master Secret and encrypts it with the public key originally sent from the Server. (Again 'sniffers' cannot decrypt the public key as only the server knows what the private key is.)
5.) Server then decrypts the public key with the private key it generated in the beginning, and then runs pseudo random function against the pre-master key. The result is the master key.
6.) Both the client and server now have the same master key which they can now use in symmetric encryption to send encrypted traffic to each other.

Am I missing something, or is this accurate? Thanks!

[davidpereira]

Fantastic explanation - straight forward, detailed and more importantly - clear and easy to follow. Best SSL/TLS handshake breakdown I have seen far. Thanks a bunch.

[justcurious]

Finally, a better video on SSL/TLS handshake!

[motarski]

Now this is how you explain How SSL/TLS works The other videos that also try to explain it should all reference to this one. Thanks man!

[TroyMurray]

Nice explanation of the process. I had not realized that both asymmetric and symmetric encryption were used during HTTPS connection setup.

[jjones]

Finally... someone who doesn't play around, and honestly explains this. Thanks.

[giaple]

Many many thanks :D
The most easy to understand video about TLS in youtube :D

[simisanoo]

Finally, a quality explanation. Thanks

[srijanar]

Simple explanation of such complex method... Excellent !!
Thanks

[khalidtouati]

Best explanation i've seen until now!

[nagz]

Indeed a very concise Explanation of the handshake.. Appreciate it

[hnasr]

Good stuff man thanks!! Clear to the points .

[ad]

Agree with the other comments. Very well explained. Thank you! You have a new subscriber and I'll be watching more of your stuff!

[עידונאמני]

finally good and simple explanation for this topic. many thanks.

[nadirslh]

I am sure Youtube was created with the likes of you in mind.. OUTSTANDING !!!

[devarsh]

Thank you for the walk through John, my only doubt regarding the tutorial is how using pre_master_secret key generated by client is used to generated symmetric key at both ends(client, server), is it like the key that was created by the client which was encrypted using server public key used as the symmetric key, or is there some other technique involved to generate the symmetric key.