The client validates the server cert against trusted CAs (and SNI selects which cert to present), both sides agree on ciphers, and key exchange (ECDHE for forward secrecy) derives symmetric session keys. TLS 1.3 does this in one round trip.
🌊 This is a free sample — 507+ more questions on DevOps Ocean
Sign in free to practice the full question bank with daily challenges, XP, streaks, duels and a global leaderboard.