Daily iOS
Networking

HTTPS and TLS

When the app sends a request to https://api.example.com, what happens at the TLS level before the first byte comes back?

How would an interviewer hear this answer? You'll see whether they'd move on, dig in, or say no, and which sentences would trip you up. Your score doesn't change.
See the short answer

DNS, then TCP, then the TLS handshake (certificate verification and key exchange), then HTTP over the encrypted channel. Asymmetric crypto is used only for key agreement and signature verification; the actual data is encrypted symmetrically with a session key.

Share a question