🤝

Mutual TLS (mTLS)

Complex

Free preview · 2 of 5 steps

mTLS: both sides prove who they are

Standard TLS authenticates only the server — the client verifies the server's certificate. The server has no cryptographic proof of who the client is.

Mutual TLS (mTLS) extends this: the server also requests the client's certificate. Both sides are authenticated with certificates signed by a trusted CA. This is the foundation of zero-trust service-to-service authentication.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step