OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer (www.troyhunt.com)
submitted by 
troyhunt(831) 5 months, 28 days ago
When it comes to website security, the most ubiquitous indication that the site is “secure” is the presence of transport layer protection. The assurance provided by the site differs between browsers, but the message is always the same; you know who you’re talking to, you know your communication is encrypted over the network and you know it hasn’t been manipulated in transit.
But unfortunately we often find sites lacking and failing to implement proper transport layer protection. Sometimes this is because of the perceived costs of implementation, sometimes it’s not knowing how and sometimes it’s simply not understanding the risk that unencrypted communication poses. Part 9 of this series is going to clarify these misunderstandings and show to implement this essential security feature effectively within ASP.NET.
|category: Security
|Views: 33
tags:
Security another
Everyones tags:
Your Tags: