OWASPASVS 5.0 requirement
ASVS-V12.3.3 Tls or another appropriate transport encryption mechanism used for all connectivity between internal, http-based services within the…
- Standard
- OWASP ASVS 5.0
- Chapter
- V12 Secure Communication
- Section
- V12.3 General Service to Service Communication Security
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that TLS or another appropriate transport encryption mechanism used for all connectivity between internal, HTTP-based services within the application, and does not fall back to insecure or unencrypted communications.