Is there a clear, concise list of of SSL settings available for IIS which will pass my PCI audit scanning?
Preferably something for both IIS 6 and IIS 7
I'm currently running into BEAST issues but I'm hoping that the answers here will be more general and a good resource for anyone needing to deal with IIS and PCI. Maybe even a canonical question. :)
I've had to piece together a list of ciphers and protocols to disable, some IIS 7 prioritization options, etc. I know it could be improved on.