What is Encryption in transit?
Client normally accesses database server over a public or untrusted network, to prevents eavesdropping and man-in-the-middle attack, database client and server would first establish a secure connection by agreeing on the encryption algorithm and ephemeral encryption key to use, then client and server can securely exchange the messages with each other.
External reference