Glossary

mTLS

Mutual TLS

TLS in which the client also presents a certificate and proves possession of its private key, so both ends authenticate each other; it is common between services and binds OAuth tokens to a client certificate in RFC 8705. The server must still map the certificate’s identity to an authorization decision.

Defined in: RFC 9846 · RFC 8705

Covered in

Guide

Authenticate workloads and authorize their service actions

Use service identities, mutual TLS and function permissions without mistaking an encrypted connection for complete authorization.