Home / server / Questions / 639137
Accepted
jmucchiello
Asked: 2014-10-24 06:56:58 +0800 CST

Can you force Windows to disallow SSL in all WINHTTP and HTTPAPI system calls?

  • 772

Title says it all. Is there a registry setting or something that will prevent the Windows built-in libraries: WINHTTP and HTTPAPI to not support SSL3?

windows

1 Answers

  1. Best Answer

    Both those APIs use, as far as I know, the SCHANNEL API to provide their SSL functionality. Disable SSL 3.0 in the SCHANNEL configuration and any applications using those APIs shouldn't be able to do SSL 3.0 anymore. (No, I haven't actually tested this-- I'm just going on my memory about those APIs.)

    • 2