|
Actions:
|
2021-03-08 20:24 AEST by Arthur Barrett - More customers are wanting to disable TLS 1.0 and 1.1
If the windows server running CVSNT Server Service disables these 'server' protocols in the registry, does the
CVSNT client now auto-negotiate TLS 1.1 OK?
https://docs.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings
Is the negotiated protocol logged?
Is there a CVSNT specific way of controlling the allowed protocols? I think 'Schannel' enable checkbox on the
server is too wide - we need to be able to use Schannel, but only TLS 1.2 or higher.
Is Schannel used for SSPI even if it is not enabled but 'SSPI Negotiate Support' is enabled? |