In-flight encryption involves encrypting a live data stream at one point and decrypting it at another point. For example, you would use data in-flight encryption to encrypt the data stream as it leaves a primary data center, then decrypt it as it enters the secondary data center.
With a live data stream, the data exchange is brief. For this reason, the keys used to encrypt the data are no longer needed after the data is decrypted at the destination and are discarded. The most common protocols used for in-flight encryption are IPsec VPN and TLS/SSL.
- SSO through Active Directory (AD)