Author: shinbet | Posted on: 8/8/2008 5:24:12 AM | Views : 302

Hi

I signed up our site for a security certificate, but  I was told that Whilst auditing my site, they came accross some vulnerabilites, notably

SSL Protocol Version 2 Detection - The remote service appears to encrypt traffic using SSL protocol version 2.

and
Weak Supported Ssl Ciphers Suites - The remote host supports the use of SSL ciphers that offer either weak encryption or no encryption at all

my webhost says

To limit SSL 2.0, we need to edit the Windows registry. It is not allowed for any client on shared server. We have checked SSL2.0 is disabled by default on Windows 2008.

 Are there any pages that i could modify to be more secure? or should I rather migrate to 2008 hosting?

 Thanks for any help on this



...

Go to the complete details ...