674 reputation
34
bio website netsekure.org
location
age
visits member for 5 years, 1 month
seen Apr 22 '13 at 22:43

Aug
24
comment Issues disabling SSL 2.0 in IIS 6
SSLv2 upgrade support means a client using backwards compatible messages can negotiate SSLv3 and above just fine. This is not a problem and can actually allow interoperability with older clients (even though they don't do SSLv2). If you need more info on that, let me know and I can explain more.
Aug
23
awarded  Commentator
Aug
23
comment Issues disabling SSL 2.0 in IIS 6
The KB does say that you need to add DWORD named Enabled and set it to 0. The DisabledByDefault will have no effect once Enabled is set to 0, it only governs whether the protocol is present by default when the protocol is enabled.
Aug
23
comment Issues disabling SSL 2.0 in IIS 6
Can you share what reg keys GSEC modified and what you expected to be modified?
Aug
23
answered Using SSLv3 - Enabling Strong Ciphers Server 2008
Aug
23
answered Do domain service accounts benefit from cached credentials?
Aug
23
awarded  Yearling
Aug
23
answered Issues disabling SSL 2.0 in IIS 6
Aug
23
comment SendMail TLS Certificate - Can it be shared for different hosts?
Web server with different host name will give error if it doesn't match the cert, so without load balancer or similar device in front of multiple servers with different host names, I don't see how it will work. You could use round robin DNS, but then all servers will appear with the same hostname, so no issue there.
Aug
20
comment SendMail TLS Certificate - Can it be shared for different hosts?
Without a load balancer in front of the servers, he will be getting a name mismatch between the certificate name and the different host names, so that won't work.
Aug
20
answered SendMail TLS Certificate - Can it be shared for different hosts?
Aug
17
answered Server 2008R2 random disconnections and connectivity issues. Schannel 36888
Jul
23
comment Untrusted certificate warning on replacement SSL certificate
The reason it works is that most likely you have Subject Alternate Name extension on the certificate that lists both myserver.com and www.myserver.com. A lot of CAs do this when issuing certificates.
Jul
21
answered SSL, EV Certs, and S3
Jul
1
answered Change which SSL Certificate Active Directory presents
May
18
comment Partial Client Certificate request for Apache HTTP
Depending on the setup, depth of 1 might actually break otherwise working scenario. Some CAs issue certificates with chain length greater than 1.
May
14
answered Using TLS-PSK on IIS
May
14
comment Does HTTPS use TCP or UDP?
Most SSL implementations expose it as SSL socket, so it implies TCP. There are very rare occurrences of using any other transport.
May
14
answered Configuring IIS7 for TLS 1.0 only
Apr
26
comment Multiple domains with SSL on same IP
With IE, support doesn't come from the IE version, rather comes from the underlying OS version. Vista and above support SNI. XP doesn't, so even with IE8 on XP, you won't get SNI.