ASVS Requirement 4.1.5

• Level: 3
• Chapter: V4 API and Web Service
• Section: V4.1 Generic Web Service Security
• Source: 0x13-V4-API-and-Web-Service.md

Description

Verify that per-message digital signatures are used to provide additional assurance on top of transport protections for requests or transactions which are highly sensitive or which traverse a number of systems.