A channel transform is a mapping applied at the byte-level to a channel. Note that it does not operate on strings; Tcl converts to/from the channel's encoding at a level that is closer to the script level than transforms operate at.
The TLS extension uses transforms internally.
Transforms may be implemented in Tcl (from 8.6 onwards) with the help of chan push and chan pop.