The service may be configured with a TLS policy that sets the minimum protocol version and the permitted cipher suites negotiated with clients.
Configurable TLS Policy
CCC.LB.CP24
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.LB.TH08 | Weak TLS Policy Permits Protocol Downgrade | The TLS policy on a listener may be configured to accept deprecated protocol versions or weak cipher suites. Clients can then be forced into a downgraded handshake and the session decrypted or modified by an entity on the transmission path, compromising the confidentiality and integrity of the data in transit. |