his task shows how to ensure your workloads only communicate using mutual TLS as they are migrated to
Istio.</p><p>Istio automatically configures workload sidecars to use <a href=/v1.9/docs/tasks/security/authentication/authn-policy/#auto-mutual-tls>mutual TLS</a> when calling other workloads. By default, Istio configures the destination workloads using <code>PERMISSIVE</code> mode.
When <code>PERMISSIVE</code> mode is enabled, a service can accept both plain text and mutual TLS traffic. In order to only al