If I want to implement both AlwaysOn Availability Groups and Encrypted Channels, how would I do this?
There is a desktop application (Visual Studio 2008 built) that interacts with this database, and the client wants traffic between the application and the database encrypted. They also want redundancy in the database.
You can simply enable SSL on each replica as per normal, but the certificate you provision should have a CN that matches the Listener name that you're connecting to.
See here for more info.