+APP.3.2.A11 Encryption via TLS (B)

APP.3.2.A11 Encryption via TLS (B)

The web server MUST provide secure encryption via TLS (HTTPS) for all connections that pass through untrusted networks. If it is necessary to use obsolete procedures for compatibility reasons, these SHOULD be limited to as few cases as possible.

If an HTTPS connection is used, all content MUST be delivered via HTTPS. Mixed content MUST NOT be used.

1. Visão geral

Título	Norma

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos
Fonte	Requisito

3. Regulamentos relacionados

Regulamentos
Fonte	Regulamentação

Pedidos ligados

Ligações
Tipo de ligação	Pedido
blocks	G 0.15 Eavesdropping

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)