Open Client applications establish a socket connection to the DCO similar to the way that existing client connections are established. Before any user data is transmitted, an SSL handshake occurs on the socket when the network transport-level connect call completes on the client side and the accept call completes on the server side.
Once the SSL session is established, user name and password are transmitted over a secure, encrypted connection.