Encryption in Transit

Kind: mechanism

Layer: Security Core

Record: architecture:encryption-in-transit

Severity: mandatory

Scope: network, service communication

Canonical: Ontology

A mechanism that encrypts traffic between parties with TLS or mutual TLS and verifies the peer's certificate.

Listed in Architecture principles, after Encryption at Rest and before Secrets Management.

Requires

• TLS/mTLS

Reinforces

• Confidentiality
• Integrity

Enables

• Secure Communication

Conflicts with

• Plaintext Transport

In tension with

• Certificate Management

Tensions

• Encryption in Transit / Certificate Management

Violated by

• Plaintext Transport

Refactored by

• TLS/mTLS

Severity

• mandatory

Category

• Security / Privacy / Compliance / Governance

Enforced by

• rules/eslint/no-plaintext-transport.eslint.rule.ts
• runtime/entrypoints/server.entrypoint.ts

Linked from

• The deploy is a file operation
• Security Privacy Compliance
• Severity levels
• The resolutions

in this codebase

• rules/eslint/no-plaintext-transport.eslint.rule.ts