To secure communications between a customer client and a merchant server, which entity generates the session key when SSL/TLS is in place?
a. The merchant server
b. The customer client
c. Either the merchant server or the customer client
d. Neither the merchant server nor the customer client
