TLS operates by establishing a secure connection through a handshake process between the email client and server. This involves:
Negotiating the TLS version and cipher suite to use. Authenticating the server (and optionally, the client) using digital certificates. Generating session keys for encrypted communication.