Just to be extra safe, the keys are discarded once the transaction's session ends. Figure 1 Asymmetrical Encription using SSL SSL doesn't prevent the message from being intercepted. However, it does make the message useless to the rogue interceptor. In other words, someone could capture the message on its way to the secure Web server, but could not decrypt it because they do not have the server's private key. The encryption process can be either symmetric or asymmetric.
Symmetric encryption uses a single key by both parties to encrypt and decrypt secure messages.
The problem is that the key itself has to be passed along as part of the conversation. This leaves the key, with its power to decrypt the messages, easy prey to a seasoned cracker. Because of this downfall, asymmetric encryption was welcomed with open arms. Since the keys are never transported with asymmetric encryption, there is never a risk of them being stolen by a rogue third party. So even if the cracker has the same root certificate installed on their browser, it will do them no good in their attempts at decrypting the message.