API Design · Senior · Question 33 of 75
What does mutual TLS (mTLS) add for service-to-service APIs?
- 1It makes APIs public
- 2It replaces authorization rules
- ✓Correct answer: Both sides present certificates, so the server knows which service is calling and traffic is encrypted, independent of network location
Explanation
Service meshes often automate mTLS. Authorization policies still decide what each service may do.