3 ms·
The payload is encrypted with the bank's public key but it can only be decrypted with their private key. This is the basis of public key cryptography [1]. [1]
by usmannk 9y ago
The payload is encrypted with the bank's public key but it can only be decrypted with their private key. This is the basis of public key cryptography [1].
[1] https://en.wikipedia.org/wiki/Public-key_cryptography https://en.wikipedia.org/wiki/Public-key_cryptography
- schoen 9y agoIt's quite counterintuitive that this is possible at all. We didn't even know a way to make it work until the 1970s!
- theEXTORTCIST 9y agoWhen talking HTTPS it's important to note that the protocol uses both asymmetric and symmetric key encryption. Asymmetric key exchange for secure session setup / authentication Symmetric key for secure session data encryption https://tools.ietf.org/html/rfc4346#section-1 https://tools.ietf.org/html/rfc4346#section-1