OWASPASVS 5.0 requirement

ASVS-V12.1.3 The application validates that mtls client certificates are trusted before using the certificate identity for authentication or…

L2 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V12 Secure Communication
Section: V12.1 General TLS Security Guidance
Level: L2 (requirement applies from this verification level up)

Requirement

Verify that the application validates that mTLS client certificates are trusted before using the certificate identity for authentication or authorization.