If your service mesh carries email addresses in any trace, request, or error output, they are exposed to every engineer, aggregator, and archive that touches those logs. Masking email addresses is not optional—it’s a core security move in production environments.
A service mesh routes traffic between microservices, injecting