OWASPASVS 5.0 requirement
ASVS-V12.1.5 Encrypted client hello (ech) is enabled in the application's tls settings to prevent exposure of sensitive metadata, such as the server…
- Standard
- OWASP ASVS 5.0
- Chapter
- V12 Secure Communication
- Section
- V12.1 General TLS Security Guidance
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that Encrypted Client Hello (ECH) is enabled in the application's TLS settings to prevent exposure of sensitive metadata, such as the Server Name Indication (SNI), during TLS handshake processes.