asp.net - gracefully rejecting RC4 https connections -


due security concerns, looking @ potentially disabling rc4 cipher on our web server (windows 2008 r2) , forcing web clients connecting use more secure protocol (aes128 or aes256)

from understand, ie8 running on xp doesn't support these better protocols, mean cutting off segment of our user base. (management aware of implication , ok it).

my question is...is there way configure site these rejected https connections handled in user friendly manner? if tries navigate https://mysite.com , ssl/tls negotiation fails, assume end user going cryptic browser message outside of control. can't tell them using alternative browser resolve issue.


Comments

Popular posts from this blog

java - Jmockit String final length method mocking Issue -

asp.net - Razor Page Hosted on IIS 6 Fails Every Morning -

c++ - wxwidget compiling on windows command prompt -