Digital Lexicon Hub

The protection of data while it moves between systems by using cryptographic protocols that provide confidentiality and usually integrity and peer authentication.

It reduces the risk that credentials, personal data, and business information are intercepted or altered across public and internal networks.

A service requires modern TLS for client and service-to-service traffic, validates certificates, rotates credentials, and disables obsolete protocols and weak ciphers.

Transport encryption protects data only between participating endpoints. Compromised endpoints can still read plaintext, metadata may remain visible, and incorrect certificate validation can enable interception.

Common implementations use TLS for web and API traffic, secure tunnels, or application-level cryptography. Certificate validation, protocol versions, cipher configuration, endpoint identity, key management, and protection against downgrade or interception attacks are essential.