TLS is the practical default for securing message communications: use an established implementation and recommended protocol versions and algorithms rather than designing a custom cryptographic protocol. section 1.4
Apply TLS as an engineering safeguard:
- Prefer widely used, thoroughly tested cryptographic implementations over handwritten cryptographic code. section 1.4
- Select TLS versions and algorithms recommended by standards organizations and regulatory authorities. section 1.4
- Treat correct integration as part of the security problem; sound primitives can still be weakened by complex interactions. section 1.4














