The default transport, built on OTP's :httpc.

Chosen because it ships with Erlang and keeps Kepler's runtime dependency list at exactly one entry. Two details are worth knowing:

• It runs in its own :httpc profile. Connection pools, cookies, and proxy settings are Kepler's, not shared with whatever the host application does with the default profile.

• TLS verification is on. :httpc does not verify certificates by default. This transport passes verify_peer with the OS trust store and hostname checking, which is what you want when the body is a signed description of your production system. Override with ssl: in transport_opts if you have a private CA.

Swap it out via Kepler.Transport if you already run an HTTP client.