A reverse proxy terminates TLS for a city API and forwards requests to the application over HTTP on the internal segment. Which statement reflects end-to-end encryption principles for APIs?
Select an answer to reveal the explanation.
Short Explanation
Unlocking the letter at the front desk and walking it down the hall in plain sight leaves a gap. Re-encrypt to the app—or terminate only there—if you want the principle applied end to end.
Full Explanation
When a proxy terminates TLS and forwards HTTP to the application, that backend segment is not end-to-end confidential. Applying encryption principles to APIs means closing leftover cleartext hops—re-encrypt to the app or terminate TLS on the app itself. Assuming termination alone covers the backend, or substituting IPsec as the only answer, misses the API-path concern.