4.9 Testing for Weak Cryptography 4.9.1 Testing for Weak Transport Layer Security 4.9.2 Testing for Padding Oracle 4.9.3 Testing for Sensitive Information Sent via Unencrypted Channels 4.9.4 Testing for Weak Encryption