Skip to content

Transport Security as a Layer

Security can be implemented as a transparent layer that encrypts and authenticates without requiring application changes; this separation of concerns enables security upgrades without application modification and makes security auditable as a distinct component.

Tension Addressed

Security vs. Performance; Transparency vs. Control

Recognizable As

TLS/SSL, HTTPS, encrypted tunnels, VPNs, certificate chains, mutual TLS (mTLS), encryption at rest vs. in transit

Canonical Sources

Rescorla, RFC 8446 TLS 1.3 (2018); Diffie & Hellman, "New Directions in Cryptography" (1976)

Transfers To

API security, zero-trust architecture, secure communication in any system, defense in depth

Sub-concepts: - Authentication vs. encryption: Knowing who you're talking to vs. preventing eavesdropping - Certificate chains: Delegating trust through hierarchical verification - Mutual authentication: Both parties verify identity, not just server