You are signed in. Close

You are signed out. Close

Thank you. Your subscription has started. Close

Thank you. You will get an email when a new comic comes out. Close

We could not confirm your payment. If you paid, use the link "Sign in" at the bottom of the page. Close

Something went wrong on our side. Please try again in a moment. Close

Previous episode TCP: how a whole web page gets through a road that loses packets

What happens when you type a web address and press Enter

HTTPS encryption: how two strangers agree on a secret key in public

Your phone and a website need one secret key to lock their talk. But every machine on the way can read the messages they send to agree on that key. In the end, they still share a secret.

  1. 1 A lock needs one secret key at both ends: scrambling messages with it, so that only its holders can read them, is called encryption. But a key sent by your phone would be read by every router too.your phonethe servera routerIf I send it,they read it.

    A lock needs one secret key at both ends: scrambling messages with it, so that only its holders can read them, is called encryption. But a key sent by your phone would be read by every router too.

  2. 2 It looks impossible. Yet since 1976 there is a way: the two ends build the same key, and the key itself never travels.your phonethe servernever sent

    It looks impossible. Yet since 1976 there is a way: the two ends build the same key, and the key itself never travels.

The rest of this episode is for subscribers

Subscribe to read every premium episode. You can cancel when you want.

Paid yearly: $99 instead of $119.88

Next episode HTTPS certificates: how your browser knows it talks to the real website

Share this comic

More comics