Communications Architecture
V1.9.1
Verify the application encrypts communications between components, particularly when these components are in different containers, systems, sites, or cloud providers. (C3)
Level 1 required: False
Level 2 required: True
Level 3 required: True
CWE: 319
V1.9.2
Verify that application components verify the authenticity of each side in a communication link to prevent person-in-the-middle attacks. For example, application components should validate TLS certificates and chains.
Level 1 required: False
Level 2 required: True
Level 3 required: True
CWE: 295
Disclaimer:
Credit via OWASP ASVS. For more information visit The OWASP ASVS Project or Github respository.. OWASP ASVS is under the Creative Commons Attribution-Share Alike v3.0 license.
Loading comments 0%