diff --git a/4.0/en/0x12-V3-Session-management.md b/4.0/en/0x12-V3-Session-management.md index 1d1b67f40..bf89e9294 100644 --- a/4.0/en/0x12-V3-Session-management.md +++ b/4.0/en/0x12-V3-Session-management.md @@ -26,7 +26,7 @@ As previously noted, these requirements have been adapted to be a compliant subs | **3.2.1** | Verify the application generates a new session token on user authentication. ([C6](https://owasp.org/www-project-proactive-controls/#div-numbering)) | ✓ | ✓ | ✓ | 384 | 7.1 | | **3.2.2** | Verify that session tokens possess at least 64 bits of entropy. ([C6](https://owasp.org/www-project-proactive-controls/#div-numbering)) | ✓ | ✓ | ✓ | 331 | 7.1 | | **3.2.3** | [DELETED] | | | | | | -| **3.2.4** | Verify that session token are generated using approved cryptographic algorithms. ([C6](https://owasp.org/www-project-proactive-controls/#div-numbering)) | | ✓ | ✓ | 331 | 7.1 | +| **3.2.4** | Verify that session tokens are generated using approved cryptographic algorithms. ([C6](https://owasp.org/www-project-proactive-controls/#div-numbering)) | | ✓ | ✓ | 331 | 7.1 | TLS or another secure transport channel is mandatory for session management. This is covered off in the Communications Security chapter.