# Encryption in Transit

Record: `arch:encryption-in-transit`
Kind: mechanism
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: mandatory
Scope: network, service communication
Canonical: https://banes-lab.com/ontology#arch-encryption-in-transit

## Repair

- Refactored by: Enable TLS/mTLS
- Detected by: HTTP/plain socket usage
- Violated by: sensitive traffic over plaintext
- Measured by: encrypted transport coverage
- Enforced by: gateway/network policy

## requires

- [TLS/mTLS](https://banes-lab.com/records/lex/tls-mtls.md)

## reinforces

- [Confidentiality](https://banes-lab.com/records/lex/confidentiality.md)
- [Integrity](https://banes-lab.com/records/lex/integrity.md)

## enables

- [Secure Communication](https://banes-lab.com/records/lex/secure-communication.md)

## conflicts-with

- [Plaintext Transport](https://banes-lab.com/records/lex/plaintext-transport.md)

## tensions-with

- [Certificate Management](https://banes-lab.com/records/lex/certificate-management.md)

## tensions

- [Encryption in Transit Certificate Management](https://banes-lab.com/records/tension/certificate-management-encryption-in-transit.md)