From 88b25d8d7f0513793d99cbd91d9c63c685456ad0 Mon Sep 17 00:00:00 2001 From: Elar Lang Date: Mon, 25 Oct 2021 12:12:56 +0300 Subject: [PATCH] update 9.1.1 description (#770) --- 4.0/en/0x17-V9-Communications.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/4.0/en/0x17-V9-Communications.md b/4.0/en/0x17-V9-Communications.md index bbedb5e1e..458a7ad06 100644 --- a/4.0/en/0x17-V9-Communications.md +++ b/4.0/en/0x17-V9-Communications.md @@ -17,7 +17,7 @@ All client communications should only take place over encrypted communication pa | # | Description | L1 | L2 | L3 | CWE | | :---: | :--- | :---: | :---:| :---: | :---: | -| **9.1.1** | Verify that secured TLS is used for all client connectivity, and does not fall back to insecure or unencrypted protocols. ([C8](https://owasp.org/www-project-proactive-controls/#div-numbering)) | ✓ | ✓ | ✓ | 319 | +| **9.1.1** | Verify that TLS is used for all client connectivity, and does not fall back to insecure or unencrypted communications. ([C8](https://owasp.org/www-project-proactive-controls/#div-numbering)) | ✓ | ✓ | ✓ | 319 | | **9.1.2** | Verify using online or up to date TLS testing tools that only strong algorithms, ciphers, and protocols are enabled, with the strongest algorithms and ciphers set as preferred. | ✓ | ✓ | ✓ | 326 | | **9.1.3** | Verify that old versions of SSL and TLS protocols, algorithms, ciphers, and configuration are disabled, such as SSLv2, SSLv3, or TLS 1.0 and TLS 1.1. The latest version of TLS should be the preferred cipher suite. | ✓ | ✓ | ✓ | 326 |