A cryptographic handshake is made so that the client can verify that it is communicating with the correct server.

The transport layer of the connection between the client and remote host is encrypted using a symmetric cipher.

The client authenticates itself to the server.

The remote client interacts with the remote host over the encrypted connection.