What are the 4 phases of SSL handshake?

After successful verification, the client generates a random symmetric key. This key is used to encrypt the actual data transmitted during the session, as it is more efficient than asymmetric encryption for large amounts of data.

The client encrypts the newly generated symmetric key using the server's public key and sends it back to the server. This ensures that only the server, with access to its corresponding private key, can decrypt and retrieve the symmetric key.

SSL handshake is initiated when a client sends a request to the server, seeking to establish a secure session. This process ensures that all subsequent communication between the two parties is encrypted and secure.

Upon receiving the encrypted symmetric key, the server decrypts it using its private key. Now both the client and server possess the same symmetric key, allowing them to encrypt and decrypt messages sent during the session.

Upon receiving the client's request, the server responds with its digital certificate, which contains its public key. This key is used by the client to encrypt sensitive information during the session.