current community

your communities

more stack exchange communities

Stack Exchange
tour help
careers 2.0
Take the 2-minute tour ×
Stack Overflow is a question and answer site for professional and enthusiast programmers. It's 100% free, no registration required.
up vote 8 down vote favorite

With reference to the recent custom SSL provision for Azure website on the reserved instance - how can I enforce 256-bit encryption? All I see is the 128 bit using RC4_128. I want to ensure users connect using 256 bit encryption using AES_256.

The link provided does not have any input on this - http://www.windowsazure.com/en-us/develop/net/common-tasks/enable-ssl-web-site/

share|improve this question
    
So you want to enforce AES 256 from the server side? Azure websites seems to support the algorithm (try disabling 128 bit algorithms in Firefox and it will negotiate AES-256 instead of RC4_128) but decide against it. –  Simon Opelt Jun 14 '13 at 7:23
    
I'm also looking for an answer to this one. On Azure roles I could define the order of the cipher suites via power shell cmdlets, but on websites I think I can't –  amhed Feb 26 at 19:59
1  
The cipher suite order is defined at the operating system level, not the application. For control over the operating system configuration you will need to use an Azure Web Role rather than a Azure Website. –  Steve Apr 17 at 11:13
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.