This question already has an answer here:
- Is TLS enough to prevent eavesdropping? [duplicate] 1 answer
- POST over HTTPS “secure enough” for sensitive data? 4 answers
- Is HTTPS secure enough for important information? [duplicate] 1 answer
- Is SSL secure enough for a REST API - has anyone used PGP or AES to encrypt the actual data inside SSL? 3 answers
I have a certificate, with weak ciphers disable, following OWASP recommendations. My framework handles private data that can not be exposed. Is it enough to use TLS to secure the channel? Or should I use something besides TLS, like end-to-end encryption (e.g, use AEAD)?