I have a query about public/private key encryption that I hope someone can answer. So as I understand it:
- Client connects to server and server responds with certificate
- Client pulls the public key from the certificate and encrypts using this
- Client sends message to server and server decrypts.
So that seems fine. What about when the server wants to send something back to the client machine that needs to be encrypted? What is the process to ensure that the server encrypts data in such a way that the client can decrypt it?