https tls ciphers selection

[cibersecyritycare 0]

Hello

Is there a way to select what kind of ciphers I want to filter ?

For example I want that the communication happens only with TLS_AES_256_GCM_SHA384. How can I create and apply this filter ?

 

Thanks

[Marcos 5,306]

Not sure if you can prioritize cipher suites in Schannell SSL provider other than programatically as per https://learn.microsoft.com/en-us/windows/win32/secauthn/prioritizing-schannel-cipher-suites#adding-removing-and-prioritizing-cipher-suites.

However, this question is beyond the scope of this forum and we recommend searching for advice in Microsoft forums and websites.

[cibersecyritycare 0]

In Eset it is possible to block the SSL v2 communication by activate TLS/SSL filetring....

So I though that by using the advanced command line it could be possible to constrain the TLS ciphers.

[Posolsvetla 15]

On 7/18/2023 at 6:22 AM, cibersecyritycare said:

For example I want that the communication happens only with TLS_AES_256_GCM_SHA384.

This must be configured in the application doing the connection, in some cases directly in Windows.

For example, in Firefox it's quite easy:
Enter about:config and search for security.ssl3 and security.tls13. Set false for all that you don't want to be used. Please note that such change might trigger serious issues when connecting to the servers which don't support any of the remaining enabled ciphers.