Insecure Communication
Insecure communication is transmitting sensitive data in HTTP plaintext or with weak TLS configuration, enabling man-in-the-middle eavesdropping and tampering.
Purpose
To understand the risks of plaintext and weak TLS communication and their defenses; a network security baseline.
Mechanism
Flaws include sending sensitive data over HTTP, TLS 1.0/1.1, weak cipher suites, no HSTS, and mixed content. Defenses: enforce TLS 1.2+, strong cipher suites, HSTS preload, site-wide HTTPS.
Use cases
- TLS configuration audit
- Transport encryption defense
- HSTS deployment
Related tools
HTTP Status Codes
Reference table of common HTTP status codes (1xx-5xx) with names, categories, and descriptions. Free, private, and 100% client-side. TOOL
URL Parser
Parse a URL into its components: protocol, host, path, query, hash, port, username, and password. Free, private, and 100% client-side. TOOL