Data transport is encrypted using up-to-date standards. Connections are established with TLS 1.3 by default; TLS 1.2 is still accepted for older clients. TLS 1.0 and 1.1 are blocked.