Could someone explain to me about how encryption works in web applications? Is it done automatically for you (like SSL) or do you implement yourself? If implemented yourself, does the encryption part occur on client side (and does that use scripts as oppose to code-behind)?

And I get confused with the idea of why the "key" have to be sent between the client and server. Thanks.