What mechanisms and methods are used to protect data when establishing HTTPS connections?

The following data protection mechanisms are used when establishing an HTTPS connection:

• TLS (Transport Layer Security): A protocol that provides data encryption between the client and server.
• Server authentication: Using digital certificates (usually X.509) issued by trusted certification authorities (CAs), the client verifies the server's authenticity.
• Key exchange: Algorithms like Diffie-Hellman or RSA are used to securely establish a shared secret key.
• Symmetric encryption: After key exchange, data is encrypted with symmetric algorithms (AES, ChaCha20) for efficient protection.
• Data integrity: MAC (Message Authentication Code) or HMAC are used to verify that data has not been altered in transit.

In Go, the crypto/tls package is typically used for working with HTTPS, which implements all these mechanisms under the hood.