This website explains the distinct “pipes” better and more precisely than does the Wikipedia article: https://hpbn.co/transport-layer-security-tls/ https://hpbn

This website explains the distinct “pipes” better and more precisely than does the Wikipedia article: https://hpbn.co/transport-layer-security-tls/ https://hpbn.co/transport-layer-security-tls/ Those pipes are the asymmetric handshake to exchange the shared secret and the symmetric encryption provided by that shared secret. Certificates do not provide encryption and thus are not a “pipe”. Certificates are used to prove the identity of one of the end points (the server).