always send data over a secure and encrypted network connection, regardless of data classification; enable TLS 1.2 or higher