Encryption in flight (SSL/TLS)

Data is encrypted before sending - gets decrypted by the server using SSL certificates

protects agains MITM attacks

Server Side / client side- at rest

with SES use: Connect to email-smtp.us-east-1.amazonaws.com endpoint using port 587.

Envelope Encryption Process

It is a process where you encrypt plaintext data with a data key and then encrypt the data key with a top-level plaintext master key.

• server side - data is encrypted after being received and stored on the server (data keys - KMS)
• Client side - data is encrypted by the client before sending