← Back to Baseline

MB-R341

HUMAN VERIFICATION REQUIRED ASVS 12.3.5 Strong internal service identity

MB-C18 ASVS Level 3 Human Assurance High

Services communicating internally within a system (intra-service communications) use strong authentication to ensure that each endpoint is verified. Strong authentication methods, such as TLS client authentication, must be employed to ensure identity, using public-key infrastructure and mechanisms that are resistant to replay attacks. For microservice architectures, consider using a service mesh to simplify certificate management and enhance security.