Allow the ability to disable TLS 1.0 so we can pass PCI scans
Allow the ability to disable TLS 1.0 on Azure Websites. I am now failing PCI security scans because TSL 1.0 is turned on. This is pretty critical if people can't use Web Apps to host sites that accept credit cards.
Here is some updated info from Microsoft. They claim to have a solution by the end of April, 2018
This is basic security. Fix this or we'll switch cloud provider.
This is NOT completed. My site is failing because of TSL 1.0 and there is no way to disable it except by switching to an expensive Premium app service plan...ouch!
Hi, this is not completed and cannot be voted. The given answer link says
"(at Wednesday, September 16, 2015 9:09 AM) The current target is that this will be done by the end of September. This is just an estimate, and it could be a bit sooner or a bit later."
From that I understand *must be done* by the end of September 2015, bu we are at June 2016 and is still a problem
Jennifer Ratt commented
We are having the same issue. We are failing scans due to: 1) TLS v 1.0 is supported and 2) SSL/TLS Weak Encryption Algorithms.