Exactly. Both sides must initially exchange their public key (called "certificate" in this case). It's of course the exact same logic as with encrypted email (

Exactly. Both sides must initially exchange their public key (called "certificate" in this case). It's of course the exact same logic as with encrypted email ("public key encryption" or "asymmetric encryption").