A civic integration sends tenant identifiers and access tokens to an API over the network. How do end-to-end encryption principles apply to that API hop?
Select an answer to reveal the explanation.
Short Explanation
If the postcard is readable on every mail truck, the token is gone—HTTPS/TLS is how the API payload stays confidential on the hop. Base64 is wrapping paper, not a lock.
Full Explanation
Applied to APIs, end-to-end encryption principles mean the request and response are not readable on the path between client and intended server—achieved with HTTPS/TLS. Cleartext HTTP carrying tokens or tenant bodies violates the principle. Homemade Base64 encoding provides neither confidentiality nor integrity.