Skip to content

Glossary: Security Fundamentals

Session key

A fresh secret key that the browser and server agree on for one HTTPS connection and use to encrypt everything in it; it is never sent as is. If stolen, it exposes only that one connection.

Where the book teaches it

Related terms

Session tokenEncryption