Home / server / Questions / 637452
Accepted
bzamfir
Asked: 2014-10-17 01:45:35 +0800 CST

What to do with secured sites in IIS in regard of SSL 3 vulnerability (POODLE Bites)

  • 772

I just find out today about this issue, and I have the following question:

If we disable SSL3 in IIS as described in On IIS, how do I patch the SSL 3.0 POODLE vulnerability (CVE­-2014­-3566)?, what will happen with the sites using SSL (through https)?

ssl

1 Answers

  1. Best Answer

    I think you're asking "What will happen to browsers that only support SSL 3.0 when accessing my site?"

    Browsers that don't support TLS 1.0 (or newer) will fail to display your site. The specific behavior depends on the browser.

    All modern web browsers (including the arguably non-modern IE 8 in Windows XP) support at least TLS 1.0. For anyone using a modern browser will have no problem (so long as they have TLS 1.0 or greater enabled in their browser settings).

    • 2