Enterprise Cloud Security and Governance

Client Hello

When the client first connects to the server, it sends a Client Hello message as a part of the SSL/TLS handshake.

In this message, the client will send the SSL/TLS version, which the client wishes to use, the list of cipher suites supported by the client, the list of compression methods supported, and a few extensions such as SNI, which includes the hostname field so that the server knows which certificate to share.

The following is a list of supported cryptographic algorithms in the preferred order (favorite choice first):

• A key exchange algorithm
• A bulk encryption algorithm
• A MAC algorithm
• PRF

From the list of supported cryptographic algorithms, the service will select one of the cipher suites and if none of them are acceptable, ...