ASP.NET MVC: How to disable SSL 2.0

Question

Is it possible to disable SSL 2.0 in my MVC project?

SSL 2.0 contains a number of security flaws (risk of man-in-the-middle attacks etc.; see wiki for more details). So I want to prevent unsecured HTTPS requests via SSL 2.0 protocol.

I know about RequireHttps attribute, but it do not allow to specify required SSL version.

SSL settings would be set in IIS if a Windows server.

decompiled
– decompiled

2013-11-15 14:40:24 +00:00
Commented Nov 15, 2013 at 14:40 — decompiled
– decompiled, Commented Nov 15, 2013 at 14:40

Tommy · Accepted Answer · 2013-11-15 15:34:26Z

1

The MVC framework knows nothing about SSL types. All it can help determine is whether or not a page has to be served over a secure connection (Https). As for what types of secure connections can be made to the server is an IIS configuration setting.

answered Nov 15, 2013 at 15:34

Tommy

39.9k10 gold badges93 silver badges125 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

wishmaster Over a year ago

So answer is - it is impossible. Thank you.

Collectives™ on Stack Overflow

ASP.NET MVC: How to disable SSL 2.0

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related