Disable SSL 3.0
Refer to the following information to disable SSL 3.0. Google recommends disabling SSLv3.
- https://disablessl3.com/
- https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/
- https://security.googleblog.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
- Open the Registry Editor, and run it as an administrator.
- In the Registry Editor window, navigate to
KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols\.
- Right-click on the Protocols folder, and select .
- Name the key SSL 3.0.
- In the navigation pane, right-click on the new SSL 3.0
key that you just created, and select .
- Name the key Client.
- In the navigation pane, right-click on the new SSL 3.0
key again, and select .
- Name the key Server.
- In the navigation pane, under SSL 3.0, right-click on
Client, and select .
- Name the value DisabledByDefault.
- In the navigation pane, under SSL 3.0, select Client.
- In the right pane, double-click the DisabledByDefault
DWORD value.
- In the Edit DWORD (32-bit) Value window, change Value data to 1, and click OK.
- In the navigation pane, under SSL 3.0, right-click on
Server, and select .
- Name the value Enabled.
- In the navigation pane, under SSL 3.0, select Server.
- In the right pane, double-click the Enabled DWORD value.
- In the Edit DWORD (32-bit) Value window, verify that Value
data is set to 0.
- Click OK.
- Restart your Windows server.