OWASPASVS 5.0 requirement
ASVS-V4.4.1 Websocket over tls (wss) is used for all websocket connections.
- Standard
- OWASP ASVS 5.0
- Chapter
- V4 API and Web Service
- Section
- V4.4 WebSocket
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that WebSocket over TLS (WSS) is used for all WebSocket connections.