From this point on in the session, public-key eneryption is no longer used; the transmission is protected by private-key encryption. All messages sent between the client and the server are encrypted with the shared private key, also known as the session key When the session ends, the session key is discarded. Any new connection between a client and a secure server starts the entire process all over again, beginning with the handshake between the client browser and the server. The client and server agree to use a specific bit level of encryption (for example, encryption or 1 bit encryption) and also agree on which specific eneryption algorithm to use. Figure 10-10 illustrates the SSL handshake that occurs client and server exchange private-key-encoded business information for the remainder of the secure session.