+Encryption of data for transmission (transport encryption)

Encryption of data for transmission (transport encryption)

The Cloud Service Provider has established procedures and technical measures for strong encryption and authentication for the transmission of data of cloud customers over public networks.
Additonal CriteriaThe Cloud Service Provider has established procedures and technical measures for strong encryption and authentication for the transmission of all data.
Supplementary Information - About the CriteriaWhen transmitting data with normal protection requirements within the Cloud Service Provider’s infrastructure, encryption is not mandatory provided that the data is not transmitted via public networks. In this case, the nonpublic environment of the Cloud Service Provider can generally be deemed trusted. The protocols TLS 1.2 and TLS 1.3 are currently regarded as strong, stateoftheart transport encryptions, in each case in combination with Perfect Forward Secrecy. The specific configuration should comply with the recommendations of the (current) version of the BSI Technical Guideline TR021022 "Cryptographic Procedures: Recommendations and key lengths. Part 2 - Use of Transport Layer Security (TLS)". Generally, the use of wildcard certificates is not considered a secure procedure.
The basic criterion for the transmission cloud customers' data, relates to e.g. the sending of electronic messages via public networks.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări