OWASPASVS 5.0 requirement

ASVS-V12.2.1 Tls is used for all connectivity between a client and external facing, http-based services, and does not fall back to insecure or…

L1 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V12 Secure Communication
Section
V12.2 HTTPS Communication with External Facing Services
Level
L1 (requirement applies from this verification level up)

Requirement

Verify that TLS is used for all connectivity between a client and external facing, HTTP-based services, and does not fall back to insecure or unencrypted communications.