Baseline · Exposure & network
A-03 External interfaces enforce TLS
highnetwork · auto
Why it matters
Non-local traffic uses TLS; credentials and instructions are never sent in cleartext.
How to test
Check whether the external endpoint is HTTPS with a valid certificate.
How to fix
Enable TLS (e.g. Let’s Encrypt) and force HTTPS redirects.