[ Not Linux-specific but likely of interest to some on this channel ] A blow-by-blow description of how a secure WWW session gets setup: http://www.moserware.com/2009/06/first-few-milliseconds-of-https.html