TransportSecurity

TLS/SSL/mTLS specifically — the handshake, cipher suites, certificate validation that secures the transport layer.

Why we need this / what value this brings

TLS is what actually prevents a network eavesdropper from reading or tampering with traffic between client and server.

When to use this

Every network hop carrying sensitive data, including internal service-to-service calls, not just the public-facing edge.

How to use or implement this

Confirm where TLS terminates (CDN/load balancer vs origin) and whether traffic between the load balancer and origin is also encrypted, not just client-to-edge.

Research questions

• Is TLS termination happening at the CDN/load balancer or at the app server — does that change what 'in transit' actually means end to end?

---

Empty folder — drop notes, links, and findings here as you research.