Reputation: 593
Is there a difference between SSLv3 and TLSv1? How does IIS6.0 control what type of security is used for a website enabled with HTTPS?
MS says that there is a hierarchy in which the security and encryption level is negotiated before connection is established. What is this hierarchy?
Is SSLv3 available in IIS6.0 by default on Windows Server 2003?
Upvotes: 23
Views: 51243
Reputation: 1655
SSLv3 and TLSv1 are not the same, however TLSv1 is based on SSLv3.
This is a protocol which is backward compatible, and gives a way to determine which version to use according to the "handshake" that takes place between the client and the server.
Read more here (this helped me understand it better): http://en.wikipedia.org/wiki/Secure_Sockets_Layer
Upvotes: 18