we have the key from verisign, they say it will always force the client to
use 128. But the security scan guy says our site has sslv2 enabled, support
weak encryption.
Is there a way in IIS to check which version of ssl, disable sslv2? what's
the difference between sslv2 and sslv3? any documentation?
Thanks
"Egbert Nierop (MVP for IIS)" wrote:
> "Jen" <Jen.RemoveThis@discussions.microsoft.com> wrote in message
> news:918D5476-F651-4B70-A65B-60B2060D0C7A@microsoft.com...
> > Hi,
> > I have a site some of the pages are using ssl. I need to disable it to
> > allow
> > lower encryption. how can I found out the encryption level, how can I
> > disabel
> > lower encryption? how can I found out if sslv2 is supported or not? thanks
>
> Depends on the key that you requested. V2 is old. V3 is good. Normally
> verisign and Thawte and others, do not provide you old certificates.
>
><!-- ~MESSAGE_AFTER~ -->
>> Stay informed about: how to force ssl higher encryption