TLS/SSL

TLS (Transport Layer Security) and its predecessor SSL (Secure Sockets Layer) are cryptographic protocols that encrypt data transmitted over networks. When you see 'https://' in a web address or a lock icon in your browser, TLS is protecting that connection. It ensures that data traveling between your browser and a website (or between any two systems) cannot be read or tampered with by anyone intercepting the traffic.

TLS protects data 'in transit' — while it's moving across networks. For compliance purposes, you should use TLS 1.2 or higher (older versions have known vulnerabilities) and ensure that the underlying cryptographic implementation is FIPS-validated when protecting CUI.