Encryption in transit secures data as it travels between endpoints, typically using Transport Layer Security. It protects against interception on untrusted networks such as public wireless connections.
Modern practice requires TLS 1.2 or higher and enforcement of encrypted connections rather than merely offering them.
Alternative Names:
Data-in-Transit Encryption, TLS Encryption
Why it Matters?
Transit encryption addresses a different threat than storage encryption, and both are needed. For legal teams the practical exposure is mobile and remote access: attorneys reviewing privileged material from hotels, courthouses, and airports are exactly the interception scenario this control exists to prevent. Vendors should be asked whether unencrypted connections are refused rather than merely discouraged.
Frequently Confused with
Related terms
Frequently asked questions
What protocol is used for encryption in transit?
Is transit encryption enough on its own?
