RE: SSL 2.0

What I am learning is that by default, IIS allows lower secure protocols for
SSL. Meaning that although I specify that the server only accepts port 443
for SSL encryption, IIS can be configured to allow SSL 3.0 only and nothing
else instead of the weaker SSL 2.0

Does that help?

Thanks

BTW - IIS 6.0 on W2K3


""WenJun Zhang[msft]"" wrote:

Hi,

To allow us be of assistance more efficiently, could you please be more
specific to the real issue you are facing currently?

For a web site on IIS, the only supported protocols should be HTTP and
HTTPS. If what you are interesting in is how to manage IIS web server
security, I suggest you take a look at the following chapters in the IIS
6.0 resource kit.

Part 1. Ch 3: Securing Web Sites and Applications
Part 2. Ch 5: Managing a Secure IIS 6.0 Solution

Internet Information Services (IIS) 6.0 Resource Kit
http://www.microsoft.com/downloads/details.aspx?familyid=80a1b6e6-829e-49b7-
8c02-333d9c148e69&displaylang=en

Again, if you have any specific question or concern, please don't hesitate
to post it here. We are pleased to be of help.

Have a nice day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.


.

Relevant Pages

  • Re: WCF webservice over SSL and without
    ... Microsoft MSDN Online Support Lead ... You can send feedback directly to my manager at: ... WCF webservice over SSL and without ... I'm also familiar with how to setup a secure site in IIS. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: WCF webservice over SSL and without
    ... Based on your further description, you have setup the SSL correctly in IIS server, but encountered some problem visit the WCF service's metadata page, correct? ... \par> Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Howto refresh IIS 6 Application pool identity credential info
    ... As soon as a new request to the corresponding web site which the AppPool ... IIS W3SVC service will then start up a new worker ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.inetserver.iis.security)
  • RE: Error with Getting Started Sample from WCF
    ... IIS. ... Host a WCF Service in IIS ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.distributed_apps)
  • Re: WCF webservice over SSL and without
    ... encryption/signature is handled by SOAP instead of HTTP (IIS) and should be ... I'm assuming there's some point of endpoint configuration I need to do. ... Are you going to use SSL over Http(the most common and convenient ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.webservices)