Skip to content

Protocol: Missing TLS Extensions

Identifier: issue_ssl_missing_tls_extensions

Scanner(s) Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner

Description

Missing TLS extensions can prevent clients from negotiating security and interoperability features.

How we test: We inspect the server's extension negotiation responses during a TLS handshake.

References:

Configuration

Example

Example configuration:

---
security_tests:
  issue_ssl_missing_tls_extensions:
    skip: false

Reference

skip

Type : boolean

Skip the test if true.