network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 2 months |
| seen | yesterday | |
| stats | profile views | 4 |
|
Sep 19 |
comment |
Zero day vulnerability appropriate corrective action So this is merely a first step approach with plan to roll into a long term forced fix. I haven't seen this done before this way is why I was alerted. |
|
Sep 19 |
accepted | Zero day vulnerability appropriate corrective action |
|
Sep 19 |
asked | Zero day vulnerability appropriate corrective action |
|
Aug 3 |
awarded | Supporter |
|
Aug 3 |
accepted | What is the industry standard approach to disable weak ciphers to mitigate vulnerabilities? |
|
Jul 6 |
awarded | Scholar |
|
Jul 6 |
accepted | What are the consequences of disabling ssl v2 and weak ciphers? |
|
Jul 6 |
comment |
What are the consequences of disabling ssl v2 and weak ciphers? I feel comfortable directing users with old browsers to update to something compatible with enabled SSL ciphers before redirecting to HTTPS. There are enough modern browsers and/or alternatives for those cases. Is there a list of browsers with shown enabled ciphers that is maintained anywhere? |
|
Jul 5 |
comment |
What is the industry standard approach to disable weak ciphers to mitigate vulnerabilities? If a tool is known that would be extra knowledge, but ideally the Group Policy rules you mention would be better. Do you have reference to a book or link that identifies where those settings are? |
|
Jul 2 |
awarded | Student |
|
Jun 30 |
comment |
What is the industry standard approach to disable weak ciphers to mitigate vulnerabilities? Mainly vulnerabilities for IIS so SSL/TLS would be most definitely desired to modify. Otherwise, I'm not sure if other ciphers for encryption would be necessary unless they pose a threat and serve no major purpose other than expose vulnerabilities. |
|
Jun 28 |
asked | What is the industry standard approach to disable weak ciphers to mitigate vulnerabilities? |
|
Jun 28 |
asked | What are the consequences of disabling ssl v2 and weak ciphers? |
