{
  "port": 1131,
  "protocol": "tcp",
  "service": "CASP SSL (caspssl)",
  "oneLiner": "The TLS-wrapped half of the CAC App Service Protocol registration; the cleartext side sits on 1130.",
  "whatItIs": "IANA registered 1131 in February 2006 as caspssl, \"CAC App Service Protocol Encripted\" (the misspelling is in the registry), paired with casp on 1130 for the unencrypted form. No public specification accompanies the registration, and Nmap's frequency data shows it open on almost no hosts. If 1131 is listening, identify the application; the registry name only tells you the vendor intended TLS.",
  "exposure": {
    "verdict": "careful",
    "note": "The registration implies TLS, but that guarantees nothing about the process actually bound here — verify with a handshake before treating it as encrypted."
  },
  "checkCommand": "openssl s_client -connect TARGET:1131 -servername TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}