I am making an web application who POST an username and password to an server who checks it. This communication is secure (SSL/TLS).
What I was wondering if the secure SSL communication is set up before or after the first contact with the server?
What I mean is that the POST data is the first data what will reach for the server. Is this data securely send or not? So what is done first the set up of the SSL bridge or does the web app first send the post request?