AnsweredAssumed Answered

A+ Rating with IIS 10

Question asked by Daniel M. on Jul 7, 2015
Latest reply on Mar 11, 2016 by Rob Moss

I'm currently configuring a Windows Server 2016 TP2 Server with IIS 10.0 with the goal to attain an A+ Rating. I'm aware that even IIS 10 does not support TLS_FALLBACK_SCSV, but I disabled all protocols with the exception of TLS 1.2, but am still only able to attain an A Rating. According to Ivan Ristic on Twitter I should be able get an A+ Rating that way, either I'm missing something else or the test is bugged. You can see the result here: https://www.ssllabs.com/ssltest/analyze.html?d=w2016ssltest.int.sp.ethz.ch

Outcomes