Difference between revisions of "Transport Layer Protection Cheat Sheet"

Latest revision as of 14:26, 15 July 2019

The Cheat Sheet Series project has been moved to GitHub!

Please visit Transport Layer Protection Cheat Sheet to see the latest version of the cheat sheet.

@@ Line 1: / Line 1: @@
-Page is under contruction - michael.coates@owasp.org<br>
+ __NOTOC__
+<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:Cheatsheets-header.jpg|link=]]</div>
-= Introduction  =
+The Cheat Sheet Series project has been moved to [https://github.com/OWASP/CheatSheetSeries GitHub]!
-== Benefits  ==
+Please visit [https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Protection_Cheat_Sheet.html Transport Layer Protection Cheat Sheet] to see the latest version of the cheat sheet.
-Confidentiality
-Integrity
-Replay Protection
-End Point Authentication
-= Rules for Transport Layer Protection<br> =
-== Server Configuration<br> ==
-=== Architecture &amp;&nbsp;Design ===
-=== Rule #1 - Use SSL for All Login Pages and All Authenticated Pages<br> ===
-=== Rule #2 - Use SSL on Networks (External and Internal) Transmiting Sensitive Data<br> ===
-=== Rule #3 - Do Not Provide Non-SSL Pages for Secure Content<br> ===
-=== Rule #4 - Do Not Perform Redirectsfrom Non-SSL Login to&nbsp;SSL&nbsp;Login Page ===
-=== Rule #5 - Do Not Mix SSL and Non-SSL&nbsp;Content ===
-=== Certificate &amp;&nbsp;Protocol Configuration ===
-Configuration
-=== Certificate Considerations  ===
-== Client Configuration  ==
-Certificate Validation
-Trusted Root Store
-Revocation List Checking
-== Additional Controls ==