CODEWITHSUNDEEP
asp.net-mvcsecuritysslhttps
wishmaster
wishmaster

Reputation: 1591

ASP.NET MVC: How to disable SSL 2.0

Is it possible to disable SSL 2.0 in my MVC project?

SSL 2.0 contains a number of security flaws (risk of man-in-the-middle attacks etc.; see wiki for more details). So I want to prevent unsecured HTTPS requests via SSL 2.0 protocol.

I know about RequireHttps attribute, but it do not allow to specify required SSL version.

Upvotes: 0

Views: 985

Answers (1)

Tommy
Tommy

Reputation: 39807

The MVC framework knows nothing about SSL types. All it can help determine is whether or not a page has to be served over a secure connection (Https). As for what types of secure connections can be made to the server is an IIS configuration setting.

Upvotes: 1

Related Questions