HTTPS Communication with External Facing Services from ASVS framework

SAMMY works best on screens 1024px wide or larger.

Encoding and Sanitization
Validation and Business Logic
Web Frontend Security
API and Web Service
File Handling
Authentication
Session Management
Authorization
Self-contained Tokens
- Token source and integrity
- Token content
OAuth and OIDC
Cryptography
Secure Communication
Configuration
Data Protection
Secure Coding and Architecture
Security Logging and Error Handling
WebRTC
- TURN Server
- Media
- Media

V12.2: HTTPS Communication with External Facing Services

V12.2.1

V12.2.1: Verify that TLS is used for all connectivity between a client and external facing, HTTP-based services, and does not fall back to insecure or unencrypted communications.

Verify that TLS is used for all connectivity between a client and external facing, HTTP-based services, and does not fall back to insecure or unencrypted communications.

Description

Verify that TLS is used for all connectivity between a client and external facing, HTTP-based services, and does not fall back to insecure or unencrypted communications.

V12.2.2

V12.2.2: Verify that external facing services use publicly trusted TLS certificates.

Verify that external facing services use publicly trusted TLS certificates.

Description

Verify that external facing services use publicly trusted TLS certificates.