OWASPASVS 5.0 requirement
ASVS-V12.3.5 Services communicating internally within a system (intra-service communications) use strong authentication to ensure that each endpoint is…
- Standard
- OWASP ASVS 5.0
- Chapter
- V12 Secure Communication
- Section
- V12.3 General Service to Service Communication Security
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that services communicating internally within a system (intra-service communications) use strong authentication to ensure that each endpoint is verified. Strong authentication methods, such as TLS client authentication, must be employed to ensure identity, using public-key infrastructure and mechanisms that are resistant to replay attacks. For microservice architectures, consider using a service mesh to simplify certificate management and enhance security.