If you terminate SSL at the Gateway and use plain HTTP for internal traffic (Gateway -> Service), what critical security risk are you introducing?

1. A The 'Man-in-the-Side' attack, where internal microservices can steal each other's database passwords.
2. B You are violating the 'Zero Trust' principle. If the internal network is breached, unencrypted traffic between services can be sniffed or intercepted by an attacker.
3. C You are making the system 10x more vulnerable to SQL Injection attacks.
4. D It will prevent the Gateway from being able to perform rate limiting or authentication.