Unencrypted connections between an application server and a database are an underestimated risk in production
Magento environments: anyone with access to the network segment between the web server and the database server can read customer data, sessions, and credentials in plain text. This article shows how to consistently secure MySQL connections with TLS on both the server and client side, manage certificates cleanly, and avoid the typical pitfalls that show up in
multi-store setups with several application servers.