In December there was a new attack surface of POODLE against TLS 1.0 (think this also covers 1.1 and 1.2?). Anyway, as a system administrator for Windows Server 2008/2012 what can we do do prevent this?
Lots of articles I read stated that due to CBC block cipher used in SSL this causes issues and I saw a great article someone wrote on this website that explained it well...but at all times I always read "this does not affect TLS"...but,now it seems it does affect it.
From reading various articles it seems like a lot state "some implementations of TLS are affected"...what does that mean???! What specific implementation are they talking about?
We have already disabled SSL 3.0 back in October but trying to understand what else we can do to prevent the new attack on TLS?
I cannot find anything apart from some articles that explain that F5 and some A10 systems or websites were affected but nothing as to how to fix this on Windows Servers.
I have also seen issues whereby the advice is not to use older browsers - I am not really interested in that as I look after servers and not desktop space and the desktop guys will know what browsers they have. I know servers have browsers so I guess I am interested a bit but internet access on servers are disabled in our company...unless you're on terminal servers..
Specifically is there anything in the registry under TLS keys that I need to change etc? I have no idea what will break if we disable TLS 1.0 (but if this newest POODLE attack affects TLS 1.1 and 1.2 then we cannot turn the whole thing off!).