disclaimer: no crypto expert. There's a concept of authenticated encryption, so your connection isn't just confident, you're also making sure nobody tampered w

disclaimer: no crypto expert. There's a concept of authenticated encryption, so your connection isn't just confident, you're also making sure nobody tampered with the content. There are multiple ways to assure that. There is a RFC for EtM in TLS: https://tools.ietf.org/html/rfc7366 https://tools.ietf.org/html/rfc7366 This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of the existing MAC- then-encrypt mechanism in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). The MAC-then-encrypt mechanism has been the subject of a number of security vulnerabilities over a period of many years. That also describes MtE. GCM in itself is already authenticated so it skirts the migration issue.