Just looking for a bit of an explanation on the concept of hybrid symmetric and asymmetric encryption.
- Client requests public key from https://site1.com
- The client receives the public key and then generates a symmetric key and then encrypts the newly generated key with the public key provided in by site1.com. Sends to site1.com
- Site1.com using its private key decrypts the message to find the client's symmetric key
If that is correct, I am not seeing or understanding what happens next? The idea with the hybrid is to use symmetric encryption to speed up communication. site1.com now has the clients symmetric key. Does site1.com now use that key to encrypt communication between it and the client? If so, what has told site1 to do that? Was it simply finding a key encrypted inside of a message?