encrypted-tunnel-pattern

name	encrypted-tunnel-pattern
description	Security pattern for channel-level encryption (TLS/SSH). Use when implementing HTTPS, securing all communication between endpoints, setting up TLS connections, or when infrastructure should handle encryption transparently. Addresses "Leak action request or data in transit" problem.

Encrypted Tunnel Security Pattern

Entities set up a communication channel where ALL exchanges are encrypted. The channel infrastructure handles encryption transparently. Common implementations: TLS and SSH.

Problem Addressed

Leak action request or data in transit: Any data transmitted over the channel could be observed. Encrypt everything at the channel level.

Core Components

Role	Type	Responsibility
Sender	Entity	Initiates communication
Receiver	Entity	Receives communication
EndpointS	Entity	Manages sending end of tunnel
EndpointR	Entity	Manages receiving end of tunnel
CryptographerS	Cryptographic Primitive	Encrypts for Sender
CryptographerR	Cryptographic Primitive	Decrypts for Receiver
EndpointManagerS	Entity	Configures sender endpoint
EndpointManagerR	Entity	Configures receiver endpoint

Data Elements

• action/data: Plaintext communication