Confirmed users
529
edits
Talk:Security/Server Side TLS: Difference between revisions
→IIS
(Add IIS guidance) |
(→IIS) |
||
| Line 5: | Line 5: | ||
== IIS == | == IIS == | ||
Is there a particular reason there are no recommendations present for secure SSL/TLS configuration of IIS servers? This page is a fantastic resource for web server administrators maintaining HTTPS configurations but the omission of any IIS guidance seems quite significant given its prevalence. I'd be happy to create some draft guidance for community review for inclusion if this is desirable. Apologies if there's a specific obvious reason I've missed. [[User:Sdl|ralish]] ([[User talk:Sdl|talk]]) | Is there a particular reason there are no recommendations present for secure SSL/TLS configuration of IIS servers? This page is a fantastic resource for web server administrators maintaining HTTPS configurations but the omission of any IIS guidance seems quite significant given its prevalence. I'd be happy to create some draft guidance for community review for inclusion if this is desirable. Apologies if there's a specific obvious reason I've missed. [[User:Sdl|ralish]] ([[User talk:Sdl|talk]]) | ||
==== ulfr, 20140424 ==== | |||
It's simple really: as far as I know, we don't use IIS for SSL termination. If we did, we would have a recommendation for it. My concern about adding an IIS section is finding someone committed to maintaining it, because I have no idea what the right way of configuring windows services is. | |||
== RC4 == | == RC4 == | ||