Pick one and press Start, then click Next › to step through it.
Watch for
The three guarantees lighting up as the handshake progresses — shared secret derived, certificate verified — and application data going out as ciphertext.
More about this scenario
You'll learn
How TLS bootstraps confidentiality, integrity, and authentication with no pre-shared secret: a Diffie–Hellman key exchange plus a CA-signed certificate.
How it runs
The client sends a public key share; the server answers with its own, so both derive the same secret without ever transmitting it. The server proves its identity with a certificate the client verifies, then bulk data flows under fast symmetric encryption.