at the figure below. This section may be easier to understand after
having seen the examples (@pxref{examples}).
-@image{internals}
+@image{internals,12cm,8cm}
As shown in the figure, there is a read-only global state that is
initialized once by the global initialization function. This global
@xref{handshake}, for more information about the handshake protocol.
The protocol layering in TLS is shown in the figure below.
-@image{layers}
+@image{layers,12cm,8cm}
@section The transport layer
@cindex Transport protocol
certification authorities may certify other authorities to issue
certificates as well, following a hierarchical model.
-@image{x509-1}
+@image{x509-1,7cm,9.5cm}
One needs to trust one or more CAs for his secure communications. In
that case only the certificates issued by the trusted authorities are
someone trusts Alice to introduce keys, then Alice is a trusted
introducer in the mind of that observer.
-@image{pgp1}
+@image{pgp1,11cm,9cm}
For example: If David trusts Alice to be an introducer, and Alice
signed Bob's key, Dave also trusts Bob's key to be the real one.