# Echo Running Without TLS

- ID: go-echo-missing-tls
- Severity: HIGH
- CWE: CWE-319 (CWE-319)
- Languages: Go
- Frameworks: echo

## Description

Echo server running over HTTP instead of HTTPS.

## Remediation

Use StartTLS with certificate files for HTTPS.

```go
e := echo.New()
e.StartTLS(":443", "cert.pem", "key.pem")
```

Learn more: https://shoulder.dev/learn/go/cwe-319/tls-config

## Related Rules

- **Fiber Running Without TLS** [HIGH]: 
- **Gin Running Without TLS** [LOW]: 
- **Ingress Missing TLS Configuration** [HIGH]: 
- **Insecure TLS Verification Disabled** [HIGH]: 
- **HTTP Used Instead of HTTPS** [HIGH]: