I guess it was long
overdue for me to follow up on my Hardening Windows Server 2003 SSL/TLS configuration and Windows server 2003 vs 2008, SSL/TLS comparison posts. They
were two of my very first blog posts and they still receive a
decent amount of traffic. The world has fortunately moved forward since then,
so in this blog post we’ll have a look at the default configuration of recent
Windows Server (WS) versions in light of the latest recommendations from SSL Labs.
We’ll keep the discussion at a reasonably high level, but I’ve included
references to more in-depth information along the way for those who want to dig
into the details. We’ll finish off with an announcement (Hint: it might have
something to do with TLS configuration and Windows Azure).