← Back to Baseline

MB-R229

HUMAN VERIFICATION REQUIRED ASVS 4.4.4 Authenticated WebSocket upgrade (when websocket is used)

MB-C16 ASVS Level 2 Contextual Human Assurance Medium

Dedicated WebSocket session management tokens are initially obtained or validated through the previously authenticated HTTPS session when transitioning an existing HTTPS session to a WebSocket channel.