1
I used Wireshark to capture the packets sent to and from google.com and a personal website of mine and...
google.com sends the Certificate right after the Server Hello. My own webserver, however, does not appear to do so. And yet, despite that, Google Chrome recognizes the websites cert.
My question is two fold.
- Why isn't the certificate being sent?
- How is the browser able to verify the authenticity of the website without having received the cert?