This question already has an answer here:

After handshake one could be assure that data are encrypted and secure.

But before that, handshake parameters are transferred via not secured channel. One could be MitM during the handshake procedure.

Why it's not a problem? What actions minimize the threat?

marked as duplicate by Steffen Ullrich tls Dec 8 '17 at 9:53

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.