OWASPASVS 5.0 requirement
ASVS-V17.2.8 The datagram transport layer security (dtls) certificate is checked against the session description protocol (sdp) fingerprint attribute,…
- Standard
- OWASP ASVS 5.0
- Chapter
- V17 WebRTC
- Section
- V17.2 Media
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the Datagram Transport Layer Security (DTLS) certificate is checked against the Session Description Protocol (SDP) fingerprint attribute, terminating the media stream if the check fails, to ensure the authenticity of the media stream.