Backend & systems·Security and identity
both sides present certificates, so the server proves who it is and so does the calling service.
Mutual TLS
Also calledmTLS, client certificates
TLS where the client also authenticates with a certificate. It gives strong service-to-service identity with no shared secret in the request, which is why service meshes default to it. The whole difficulty is certificate lifecycle: issuance, rotation and revocation at scale, which is why it is usually adopted with a mesh rather than by hand.