Transport Layer Security
TLS protects data in transit between its endpoints. Application permissions, stored data and further connections need their own measures.
What does TLS mean?
Transport Layer Security (TLS) is a protocol for protecting a network connection. RFC8446 describes confidentiality, integrity and authentication of the communicating parties. In ordinary web access, the server proves its identity; a client certificate is not automatically required. MDN also places TLS in other applications, such as email.
Example: protecting the portal connection
In the fictional design, a browser connects to portal.studio.example. TLS protects transmission up to the system that terminates that TLS connection. If this system forwards the request to another internal service, that is an additional connection whose protection must be planned separately. The name is a placeholder.
The team checks appropriate certificates, timely renewal and the actual connection configuration. Simply saying “TLS is present” does not fully describe those tasks.
TLS does not decide which projects a signed-in person may read or automatically encrypt stored files. Those rules and protections belong to the application and storage.
Sources
Related terms
- HTTPSHTTPS protects HTTP communication using TLS. Protected transport alone does not establish correct form processing or a user’s access rights.
- Return-PathReturn-Path records the SMTP reverse path in a header. It explains the technical route for error reports, not a person’s identity.
- Envelope-FromEnvelope-From identifies the SMTP sender for transport and error feedback. It must be distinguished from the visible sender address.
- DMARC aggregate reportA DMARC aggregate report summarises a reporting mail system’s domain checks over a period. It helps examine sending sources and misconfigurations.
- DMARC policyA DMARC policy describes the requested handling of failed domain checks. It repairs neither sending sources nor their alignment.
- DKIM selectorThe DKIM selector and signing domain point to the public verification key. It helps map keys to specific sending routes.
Articles on this topic
Cloud & Operations with ASES
Hosting, deployment, maintenance and support