Best Practice Detail

13-12-8633

Network Operators, Service Providers, Equipment Suppliers and Public Safety should design passwords used for an application login to be consistent with applicable industry security guidelines and policies. Whether between the client and the server or among servers, passwords must not be transmitted “in the clear.” SSL should be used for any transaction involving authentication. The transmission of session IDs should be similarly protected with SSL.

Status: Rollover New

References/Comments:

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Wireless
Cyber Security
Hardware
Information Protection
Public Safety Service
Encryption
CSRIC VII: Rollover New In CSRIC VII