REQ-NFR-010

All non-localhost traffic over TLS 1.2+

ID: REQ-NFR-010
Category: Non-Functional Requirements
Status: approved
Priority: P0
Created: 2026-05-10T18:01:15.432Z
Approved: 2026-05-10T18:03:06.308Z
Updated: 2026-05-10T18:03:06.308Z

What

All non-localhost traffic SHALL be over TLS 1.2+.

Acceptance

Configuration verified; non-TLS rejected when bound to non-loopback.

Category

Security.

established project management guidelines Mapping

Primary Knowledge Area: Risk Management
Secondary KA: Quality Management
Primary Process Group: Planning
established project management guidelines Deliverables: Risk Management Plan, Quality Management Plan

TLS-everywhere is a security risk response baked into the design.