Min
Mon Feb 20 16:04:05 CST 2006
no Oli..that's not what I mentioned..
I know that you can use the security tab to enforce SSL the entire website
or at the specific folder level..for us, some of the pages in our website
are non-SSL pages and we still want the clients to access normally with
http..only when it comes to application pages, then we want the client to
use SSL..in that perspective, for those user comes in with the browser with
lower encryption level (like they only check the box SSLv2.0 and less then
128 bits on Advanced Tab of IE), they are still allowed to get through with
SSLv2.0 instead of SSLv3.0..
I like to bump them out if their browser is configured with SSLv2.0..
that's what I'm trying to accomplish..
"Oli" <oli@nomail.com> wrote in message
news:zhqKf.120142$6Q3.117394@fe07.news.easynews.com...
> Correct me i'm wrong, i'm still bushing up on my SSL but i think you can
> enforce 128bt encryption on the security tab of IIS sites.
>
> Check out. [url]
http://support.microsoft.com/kb/298805 [url]
>
> "Min" <mintaung@hotmail.com> wrote in message
> news:%232ppV$lNGHA.1216@TK2MSFTNGP14.phx.gbl...
> > Hi all,
> >
> > Is there a way for IIS 5.0 to enforce the client browser to use SSLv3.0
or
> > higher when they try to access the website via SSL?
> > I mean..If they access the website with lower encryption like SSLv2.0 or
> > less than 128 bits, IIS doesn't NOT allow them to proceed..
> >
> > thanks in advance.
> > Mike
> >
> >
>
>