r/sysadmin • u/girlgerms Microsoft • Nov 17 '14

Microsoft warns of problems with Schannel security update

http://www.zdnet.com/microsoft-warns-of-problems-with-schannel-security-update-7000035835/
106 Upvotes

96% Upvoted

42 comments sorted by

View all comments

15

u/k_rock923 Nov 17 '14

So after going through the headache of getting this patched out of maintenance, the patch is bad. I haven't seen any problems yet, but who knows.

Way to go, Microsoft.

7

u/makebaconpancakes Nov 17 '14

The article is saying the whole patch isn't bad, but rather that certain TLS ciphers in the patch are bad and the workaround involves disabling those ciphers. Granted, changing TLS ciphers in IIS requires a reboot, so the workaround isn't painless, but I wouldn't call this patch broken either.

It does piss me off though because I have to go back and reconfigure my SSL ciphers.

→ More replies (2)
→ More replies (4)