AnsweredAssumed Answered

the dreaded ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY error in Chrome

Question asked by Sherri Harris on Sep 15, 2017
Latest reply on Sep 18, 2017 by Sherri Harris

I'm getting the dreaded ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY error in Chrome.    site works good in IE.

I've been using the Qualsys SSL scan and IISCrypto to adjust the cipher settings. It's a new server running windows datacenter 2016, IIS 10

 

 

 

 

 

The SSL scan gives me an A,

Handshake simulation shows:

Chrome 49 / XP SP3

Server negotiated HTTP/2 with blacklisted suite RSA 2048 (SHA256)   |  TLS 1.2 > h2    |  TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA  |  ECDH secp384r1

Chrome 57 / Win 7  R

Server negotiated HTTP/2 with blacklisted suite RSA 2048 (SHA256)   |  TLS 1.2 > h2    |  TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA  |  ECDH secp384r1

 

Clicking into Chrome 49/XP SP# - shows:

TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa)   WEAK

I'm a little confused because I disabled the TLS_RSA_WITH_3DES_CBC_SHA cipher and unchecked Triple DES 168 in the ciphers enabled box in iiscrypto.

Any assistance would be appreciated,

Outcomes