OWASPASVS 5.0 requirement
ASVS-V12.3.1 An encrypted protocol such as tls is used for all inbound and outbound connections to and from the application, including monitoring…
- Standard
- OWASP ASVS 5.0
- Chapter
- V12 Secure Communication
- Section
- V12.3 General Service to Service Communication Security
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that an encrypted protocol such as TLS is used for all inbound and outbound connections to and from the application, including monitoring systems, management tools, remote access and SSH, middleware, databases, mainframes, partner systems, or external APIs. The server must not fall back to insecure or unencrypted protocols.