Server disables TLS 1.0 protocol

TLS (Transport Layer Security) 1.0 is an outdated encryption protocol, and only a few websites continue to use TLS 1.0. Microsoft announced in 2018 that it would stop using TLS 1.0 in 2020 and implement a more secure encryption protocol (TLS v1.1 or higher) to meet the requirements of the PCI Data Security Standard, but many website administrators are not aware of TLS 1.0 There are significant vulnerabilities that are vulnerable to attack, and upgrading to new versions helps ensure a more secure web for everyone.

In terms of compatibility, after disabling the TLS 1.0 protocol, most of the built-in browsers on older systems will not support access. Chrome, Firefox and other browsers used by mainstream users are basically compatible.

The ways to disable it are:

nginx server, execute the following command:

ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;

Windows server server, modify the registry, copy the following code and save it in .reg file format, double-click to run and import the registry directly, and restart the server after completion.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/SecurityProviders/SCHANNEL/Protocols/TLS 1.0]

[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/SecurityProviders/SCHANNEL/Protocols/TLS 1.0/Client]
“DisabledByDefault”=dword:00000001
"Enabled"=dword:00000000

[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/SecurityProviders/SCHANNEL/Protocols/TLS 1.0/Server]
“DisabledByDefault”=dword:00000001
"Enabled"=dword:00000000

If you find it troublesome to modify the registry, there is also a simple automatic configuration tool IISCrypto. After downloading the tool, you can use the recommended configuration to complete the security settings. Just leave TLS1.0 unchecked. It is very simple to use.

Recommended site searches: US server defense, domain name registration, how to rent a server, multi-ip site group server, domain name query, Guangdong website registration, asp host space, foreign permanent free server recommendation, game server defense, linux virtual host, < /p>