none
HttpWebRequest supports SSL 2.0 servers? RRS feed

  • Question

  • Hi guys,

    I was searching all over, but couldn't find a definite answer if a call made by HttpWebRequests supports SSL 2.0 servers or not.

    I know already that the underlying protocol architecture can be configured using the ServicePointManager.SecurityProtocol enumeration which has the values:

    • Ssl3
    • Tls
    • Tls11
    • Tls12

    -> So the question is if the Ssl3 setting is downwards compatible if a server only supports SSL 2.0?

    Thank you very much for your help, cheers Rene

    Wednesday, June 5, 2013 9:46 AM

Answers

  • SSL2 and SSL3 are different protocols (they have several substantial differences), so while initially SSL implementation in Windows supported SSL 2, they probably have dropped this support long time ago.  SSL 2 is not secure enough for modern requirements.

    If you have no other solution (such as re-configure the server), you can use SecureBlackbox library which has its own SSL/TLS engine that supports SSL 2.

    Sincerely yours, Eugene Mayevski

    Wednesday, June 5, 2013 2:18 PM