ion rule. On the other hand, you still need to add the <code>mtls</code> stanza to the authentication policy as the service-specific policy will override the mesh-wide (or namespace-wide) policy completely.</div></aside></div><p>After these changes, traffic from Istio services, including ingress gateway, to <code>httpbin.foo</code> will use mutual TLS. The test command above will still work. Requests from Istio services directly to <code>httpbin.foo</code> also work, given the correct token:</p><pre><code c