127 reputation
5
bio website
location
age
visits member for 2 years, 8 months
seen Apr 18 at 21:10

Nov
25
awarded  Popular Question
Nov
6
awarded  Popular Question
Sep
19
comment Zero day vulnerability appropriate corrective action
So this is merely a first step approach with plan to roll into a long term forced fix. I haven't seen this done before this way is why I was alerted.
Sep
19
accepted Zero day vulnerability appropriate corrective action
Sep
19
asked Zero day vulnerability appropriate corrective action
Aug
3
awarded  Supporter
Aug
3
accepted What is the industry standard approach to disable weak ciphers to mitigate vulnerabilities?
Jul
6
awarded  Scholar
Jul
6
accepted What are the consequences of disabling ssl v2 and weak ciphers?
Jul
6
comment What are the consequences of disabling ssl v2 and weak ciphers?
I feel comfortable directing users with old browsers to update to something compatible with enabled SSL ciphers before redirecting to HTTPS. There are enough modern browsers and/or alternatives for those cases. Is there a list of browsers with shown enabled ciphers that is maintained anywhere?
Jul
5
comment What is the industry standard approach to disable weak ciphers to mitigate vulnerabilities?
If a tool is known that would be extra knowledge, but ideally the Group Policy rules you mention would be better. Do you have reference to a book or link that identifies where those settings are?
Jul
2
awarded  Student
Jun
30
comment What is the industry standard approach to disable weak ciphers to mitigate vulnerabilities?
Mainly vulnerabilities for IIS so SSL/TLS would be most definitely desired to modify. Otherwise, I'm not sure if other ciphers for encryption would be necessary unless they pose a threat and serve no major purpose other than expose vulnerabilities.
Jun
28
asked What is the industry standard approach to disable weak ciphers to mitigate vulnerabilities?
Jun
28
asked What are the consequences of disabling ssl v2 and weak ciphers?