I have recently read about the german enigma machine in WW2, It worked in a way that every day the machine configuration was sent per mail to the different operators. (I couldn't find official sources on this, please do suggest an edit if i said something wrong)
Obviously these ciphers could be confiscated by the allies, but that apparently wasnt very effective compared to brute forcing it. (Turing)
Now about online encryption like https, how is it possible to encrypt anythingonline, if the decryption key would also need to be transferred somehow.
It just never made sense to me, even if there is a public+private key scenario. If someone can tap into the connection, he can see both being sent right?
I would love to get enlightened on this, this is where my amateur theories on cryptography break down.. Thanks!