1)When a gmail user opens gmail dot com in his web browser, the user is directed to https.
2)now the ssl hand shake goes through process-
first the gmail client says hello
gmail server says hello
gmail server sends the public key certificate
gmail server hello done
client key exchange
client change cipher spec
client encrypted handshake message
server change cipher spec
server encrypted handshake message
now the client uses the public key to encrypt the message it sends to gmail server and gmail
server uses his private key to decrypt the message.
My question is, which key gmail server is going to use to encrypt the message( his private or public key)
and can any one explain the things happening in each of those 9 process.