What actually happens behind the scenes of a HTTPS connection?

“Client Hello. TLS wraps all traffic in “records” of different types. We see that the first byte out of our browser is the hex byte 0x16 = 22 which means that this is a “handshake” record.

The next two bytes are 0x0301 which indicate that this is a version 3.1 record which shows that TLS 1.0 is essentially SSL 3.1.

The handshake record is broken out into several messages. The first is our “Client Hello” message (0x01). There are a few important things here…..” (continued in full article link below)”

full article: The First Few Milliseconds of an HTTPS Connection