Internal SSL ASP.net WebRequest?

With the recent disclosure of POODLE ( CVE-2014-3566 ), many servers, including payment gateways, disable SSLv3 on their servers and force them to use TLS.

Does anyone know what SSL is used internally by ASP.Net Framework for things like WebRequest? If it uses SSLv3 and doesn't fall back to TLS automatically, is there a way to configure this?

Note. We have already disabled SSLv3 through the registry and do not seem to affect HTTPS traffic to our websites. I'm just not sure what happens when the payment gateway turns them off at the end.

+3


source to share


1 answer


This is user controlled via ServicePointManager.SecurityProtocol

. This is the default SecurityProtocolType.Tls|SecurityProtocolType.Ssl3

.



0


source







All Articles