rspec/rules/S4830/rationale.adoc

10 lines
500 B
Plaintext
Raw Normal View History

2023-06-20 13:26:14 +02:00
Transport Layer Security (TLS) provides secure communication between systems
2024-01-29 14:28:14 +01:00
over the internet by encrypting the data sent between them. Certificate validation
adds an extra layer of trust and security to this process to ensure that a system
is indeed the one it claims to be.
2023-06-20 13:26:14 +02:00
2024-01-29 14:28:14 +01:00
When certificate validation is disabled, the client skips a critical security check.
2023-06-20 13:26:14 +02:00
This creates an opportunity for attackers to pose as a trusted entity and
intercept, manipulate, or steal the data being transmitted.