Curriculum · Phase 4 · Module 4.3

Encryption in Transit + TLS

How data is protected while it moves: the TLS handshake, TLS 1.2 vs 1.3, mutual TLS for service-to-service trust, and the certificate lifecycle whose weakest link — an expired or weakly-configured cert — is one of the most common audit findings and outages alike.