Strength Training With Transport Cryptology: Part 2

This blog outlines PCI-DSS transport encryption considerations—referencing NIST SP 800-52 and a PCI FAQ—covering ASV scanning (requirement 11.2), scoping differences for trusted vs untrusted networks, and a recommendation to encrypt cardholder data even within trusted networks ahead of PCI-DSS 4.0; it also warns against protocols that expose credentials (e.g., Telnet, FTP).