The handshake before https://, record by record: the key agreement, the certificate and the checks a client makes, then the password inside the encrypted connection