05eb0a61_P_Top_Ten_Cheat_Sheet____OWASP__1
[0] 'A10 Insufficient Transport Layer Protection' [2] Mandate strong encrypted communications between web and database servers and any other servers or administrative users [3] Mandate strong encrypted communications with application servers and any other servers or administrative users [1] 
Use TLS 1.2 or later for all web communications Buy extended validation (EV) certificates for public web servers Tip: Use TLS 1.2 always – even internally. Most snooping is done within corporate networks – and it is as easy and unethical as fishing with dynamite.
Difference between revisions of "OWASP Top Ten Cheat Sheet" - OWASP