Millised võtmed edastatakse serverilt kliendile?

In a standard HTTPS connection, the following keys are transmitted from the server to the client:

• Server certificate (Certificate): Contains the server's public key, owner information, expiration date, and the signature of the certification authority. It is used by the client to verify the server's authenticity and to obtain its public key.
• DHE/ECDHE parameters (when ephemeral Diffie-Hellman keys are used): Parameters g, p (for DHE) or curve parameters (for ECDHE), with which the client and server jointly compute a shared secret for subsequent session encryption. These keys are temporary and generated for each session, ensuring Forward Secrecy.

It is important to note that the private key of the server is never transmitted to the client. It is stored only on the server.

After the key exchange, the client and server use the agreed-upon shared secret to generate session keys (Session Key / Symmetric Key), which are used for encrypting and decrypting transmitted data during the session. The session key itself is never transmitted in plain text, but is generated independently by both parties based on the shared secret.