OWASPASVS 5.0 requirement
ASVS-V12.1.2 Only recommended cipher suites are enabled, with the strongest cipher suites set as preferred.
- Standard
- OWASP ASVS 5.0
- Chapter
- V12 Secure Communication
- Section
- V12.1 General TLS Security Guidance
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that only recommended cipher suites are enabled, with the strongest cipher suites set as preferred. L3 applications must only support cipher suites which provide forward secrecy.