BSI: Minimum standard for using TLS

B2B Cyber ​​Security ShortNews

Share post

The Federal Office for Information Security - BSI for short - updates the minimum standard for the use of Transport Layer Security (TLS) and provides white papers and reference tables.

Due to the corona pandemic, work from the home office has increased significantly. It becomes clear how important the correct protection of the transmission of data via communication networks is (see BSI economic survey: Home office increases the attack surface for cyber criminals). Inadequately secured transmission can lead to information being intercepted or manipulated without authorization. One way to secure the transmission is to use Transport Layer Security (TLS).

BSI supports you in securing data transmission

The minimum standard for the use of Transport Layer Security of the Federal Office for Information Security (BSI) supports the protection of the transmission of data via communication networks.

It offers clear guidelines for a secure configuration of TLS. The new version 2.2 of the minimum standard takes into account the current recommendations of the technical guidelines of the BSI (TR 02102-2, TR 03116-4) and addresses the handling of TLS protocol versions and cryptographic procedures that do not meet the requirements of the minimum standard.

Helpful documents for the implementation

At the same time as the minimum standard, a revised auxiliary document and an updated reference table for comparison with IT-Grundschutz will be published. Version 2.2 of the minimum standard as well as the auxiliary document and the reference table are available for download on the BSI website.

More at BSI.Bund.de

 

Matching articles on the topic

Report: 40 percent more phishing worldwide

The current spam and phishing report from Kaspersky for 2023 speaks for itself: users in Germany are after ➡ Read more

BSI sets minimum standards for web browsers

The BSI has revised the minimum standard for web browsers for administration and published version 3.0. You can remember that ➡ Read more

Stealth malware targets European companies

Hackers are attacking many companies across Europe with stealth malware. ESET researchers have reported a dramatic increase in so-called AceCryptor attacks via ➡ Read more

IT security: Basis for LockBit 4.0 defused

Trend Micro, working with the UK's National Crime Agency (NCA), analyzed the unpublished version that was in development ➡ Read more

MDR and XDR via Google Workspace

Whether in a cafe, airport terminal or home office – employees work in many places. However, this development also brings challenges ➡ Read more

Test: Security software for endpoints and individual PCs

The latest test results from the AV-TEST laboratory show very good performance of 16 established protection solutions for Windows ➡ Read more

FBI: Internet Crime Report counts $12,5 billion in damage 

The FBI's Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, which includes information from over 880.000 ➡ Read more

HeadCrab 2.0 discovered

The HeadCrab campaign against Redis servers, which has been active since 2021, continues to successfully infect targets with the new version. The criminals' mini-blog ➡ Read more