C02-BP: No
Rationale
BPSec prohibits encrypting the primary block, which carries bundle destination information. A forwarding BP node sees that block after terminating hop-local TCPCL/TLS. Payload confidentiality and protection against a passive link observer do not conceal the destination from this intermediary. No bundle-in-bundle encapsulation is selected.
Assessment method
Documentary analysis
Source context
Primary specification / selected profile