Encryption in Transit / Certificate Management
Kind: tension
Record: tension:certificate-management-encryption-in-transit
Canonical: Schema
"encryption-in-transit" (security-core layer) is traded against "Certificate Management" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Certificate Management" and choosing an explicit operating point.
Listed in Tensions, after Encryption at Rest / Key Operations and before Secrets Management / Operational Complexity.