News for hackers. Stuff that matters.

A comment on Now I understand why almost no one uses encrypted email. Parent comment

Re:Now I understand why almost no one uses encrypted email by austincheney on Friday April 17, 2020 @03:27AM (#22896953)
This website explains the distinct “pipes” better and more precisely than does the Wikipedia article: https://hpbn.co/transport-layer-security-tls/

Those pipes are the asymmetric handshake to exchange the shared secret and the symmetric encryption provided by that shared secret.

Certificates do not provide encryption and thus are not a “pipe”. Certificates are used to prove the identity of one of the end points (the server).

[ Parent | on HN ]
Re:Now I understand why almost no one uses encrypted email by tialaramex on Friday April 17, 2020 @11:08PM (#22905029)
Those two "pipes" you're talking about aren't one inside the other, the key agreement just takes place sequentially before the key is used because of casuality.
[ Parent | on HN ]