SecurityDevOps/CloudBackendHigh signal

mTLS

Also written as Mutual TLS, Mutual Authentication

A setup where both sides of a connection prove who they are with certificates, not just the server — common between internal services in zero-trust architectures.

Think of it like

Both people showing ID at the door, instead of only the host proving they own the house.

Junior or senior?

A real infrastructure depth signal.

Senior sounds like

Mentions certificate rotation and expiry, which is where mTLS deployments actually break.

Ask them

“How were certificates rotated, and what happened the first time one expired unexpectedly?”