Which practices are essential for secure communications in contested environments?

• A. End-to-end encryption, mutual authentication, and robust key management.
• B. End-to-end encryption, but without authentication.
• C. Relying solely on perimeter defenses and assuming external networks are trusted.
• D. Use plain text communications for efficiency.

Answer: (A)

In contested environments, secure communications rely on three pillars: confidentiality, authentication, and robust key management. End-to-end encryption ensures that the content remains unreadable to anyone except the intended recipient, even if the message passes through untrusted or compromised networks. Mutual authentication verifies both parties’ identities, preventing impersonation and man-in-the-middle attacks where an adversary could otherwise insert themselves into the communication. Robust key management covers how keys are created, distributed, stored, rotated, revoked, and destroyed, so a compromised key doesn’t compromise long-term security and new keys can be issued securely.

Without authentication, encryption alone can be dangerous because you might be encrypted to an impostor, so you could be sharing secrets with a bad actor. Relying only on perimeter defenses or assuming external networks are trusted leaves internal communications exposed if attackers breach the network or bypass borders. Using plain text removes any confidentiality and makes interception trivial, exposing sensitive information to anyone who can observe the channel.