title: SSL: How the client decrypt message from server
body: <p>I've read and watched a lot of articles and videos about SSL AES and RSA, but one thing is ALWAYS missing in every explanation( or I just don't get it ) is how the client decrypts sensitive data that comes from the server!(e.g. how much money you have) </p>
  
  <p>I get it that your public key can encrypt anything and send it to the server and anyone can have it, but what do you do when you want to retrieve something from the server? 
  Does it comes just as plain text?</p>
  
  <p>Any of the articles and videos point that out, they all just say that you have a private key that you shouldn't share and a public key that you can encrypt your messages and share it in the internet, but they don't say how the client makes a GET request with a encrypted message and decrypt it so it can be human readable.</p>
  
  <p>As it says in <a href="https://blog.cloudflare.com/why-are-some-keys-small/" rel="noreferrer">this link</a> about AES:</p>
  
  <blockquote>
    <p>Asymmetric cryptography works by having two different keys, one for
    encryption and one for decryption. It's also often called 'public key
    cryptography' because it's possible to make one key public (allowing
    someone to encrypt a message) while keeping the other private (only
    the holder of the private key can decrypt the message encrypted with
    its related public key).</p>
  </blockquote>
  
  <p>Any help is welcome!</p>
  
  <p>I will leave some links about web security that I found useful to learn:
  <a href="https://www.coursera.org/learn/internet-history/lecture/L7HzI/security-integrity-and-certificate-authorities" rel="noreferrer">https://www.coursera.org/learn/internet-history/lecture/L7HzI/security-integrity-and-certificate-authorities</a></p>