title: Can one hack HTTPS with the below scenario>
body: <p>QUESTION: The initial request/response HTTPS communication between client and server are not encrypted, except for the CA certificate in the response?
  If so, what prevents a hacker from seeing the initial client request to the server, and intercept the response from the server,
  containing its CA certificate, decrypting the certificate with the CA's public key, get the server's public key in the certificate,
  and use it to encrypt its own symmetric key and send to the server, thereby bypassing the client, and establishing a bogus dialog between hacker and server?</p>