Link to home
Start Free TrialLog in
Avatar of Jeremy Leys
Jeremy LeysFlag for New Zealand

asked on

Is 256bit SSL backwards compatiable with legacy 128bit?

Hi,

I want to enable 256bit encryption which my SSL certificate is capable of for Windows 2008 R2 server. With IIS7 to do 256 bit encryption, we have to ensure the cipher suit that is listed first is the following: TLS_RSA_WITH_AES_256_CBC_SHA, if I do this will old browsers / systems still be able to connect with legacy 128bit?

I don't want to stop people who can only achieve 128bit from connecting and using the website. How can I ensure that the site is 256bit and 128bit compatible?
ASKER CERTIFIED SOLUTION
Avatar of Dave Howe
Dave Howe
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Jeremy Leys

ASKER

Thank you, the documentation you provided is excellent, yes you are right as far as I can see from my testing you can't prefer 256 bit without disabling 128. But thanks anyway I am going to stick to 128bit for the time being.
sorry I couldn't give you a better answer, but IIS is not particularly configurable in this matter :(