Let's assume that I am logging into my Gmail account from my browser using my username and password. I know that my input will be encrypted using Google's private key and the only one who can decrypt it is Google's server. So Google's server will read it and send the response to me using WHAT key?
I am thinking “if Google uses their own private key then the man-in-the-middle could decrypt the response using Google's public key and can read my emails”
How is the response secured then?