Secure Socket Layer is a commonly used form of encryption over the internet using VPN's. We will take an in depth look at how the protocol works.SSL encryption has taken the internet by storm and it has been speculated by many security experts that its versatility will eventually lead to the downfall of IPSec. SSL encryption is not a complicated protocol, in fact it has many similarities to the Fair Coin Flip protocol. Here we will break SSL down step by step.

  1. The Internet Browser sends a request for the secure page along with the encryption options that the browser has available.
  2. The Web Server sends the User its public key, and its certificate.
  3. The browser checks that the certificate is valid with the issuing certificate authority.
  4. The browser generates a random string of characters and concatonates it to the public key sent by the Web Server.
  5. The browser uses this string of characters to generate a public/private key pair and sends its public key to the server. Along with information about the web page to be accessed. This message is encrypted with the Web Server's public key.
  6. The Web Server decrypts the message using its private key.
  7. The Web Server uses the Browser's public key to encrypt the data requested by the Browser.
  8. The Web Server sends the sensitive information to the browser, and the user is now able to see it.


Secure Socket Layer would be vulnerable to a Man-in-the-Middle attack if it weren't for the Certificate Authority. Having a Trusted third-party is beneficial to most protocols and will help limit the effects of would be attackers.