Security Features

Requirements

Project Conga implementation is intended to conform to the FIX-over-TLS (FIXS) recommendations of the FIX Cybersecurity Working Group.

Implementation

Authentication

In the initial implementation, the server is authenticated by a certificate. For demonstration purposes, it is self-signed, but of course, a production system should use one issued by a certificate authority.

With just configuration changes, it would be possible to use mutual authentication with a certificate on the client side.

Encryption

Cipher suites are negotiated between client and server as specified by the TLS protocol. See the FIX-over-TLS document for recommended cipher suites.