Architecture
The drawing below shows the CliSiTef architecture with TLS.
In this architecture, communication between POS and SiTef is intercepted by a TLS server responsible for installing and validating security certificates and for encrypting and decrypting messages.
This server will change depending on the TLS provider used.