The handshake protocol of TLS negotiates cipher suites of
a special form illustrated by the
TLS_DHE_RSA_WITH_3DES_CBC_SHA cipher suite name. A typical cipher
suite contains these parameters:
DHE_RSAin the example.
3DES_CBCin this example.
MAC_SHAis used in the above example.
The cipher suite negotiated in the handshake protocol will affect the record protocol, by enabling encryption and data authentication. Note that you should not over rely on TLS to negotiate the strongest available cipher suite. Do not enable ciphers and algorithms that you consider weak.
All the supported ciphersuites are listed in ciphersuites.
MAC stands for Message Authentication Code. It can be described as a keyed hash algorithm. See RFC2104.