This website explains the distinct “pipes” better and more precisely than does t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

austincheney on April 17, 2020 | parent | context | favorite | on: Now I understand why almost no one uses encrypted ...

This website explains the distinct “pipes” better and more precisely than does the Wikipedia article: https://hpbn.co/transport-layer-security-tls/

Those pipes are the asymmetric handshake to exchange the shared secret and the symmetric encryption provided by that shared secret.

Certificates do not provide encryption and thus are not a “pipe”. Certificates are used to prove the identity of one of the end points (the server).

tialaramex on April 18, 2020 [–]

Those two "pipes" you're talking about aren't one inside the other, the key agreement just takes place sequentially before the key is used because of casuality.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact