: First off, 128-bit AES is very good. The prevailing opinion is that it is secure for the future close enough to care about. Setting that aside, the reason you're getting 128-bit encryption

@Murphy175

First off, 128-bit AES is very good. The prevailing opinion is that it is secure for the future close enough to care about.

Setting that aside, the reason you're getting 128-bit encryption is because that was what was negotiated. The certificate has little to do with it; the SSL cert is an RSA keypair, and there's no way that's only 128 bits. It's more likely you're using a 2048-bit public-private pair and you just negotiated a 128-bit TLS session key.

Take a look at the server settings - IIS 6 is very dated at this point.

Vote Up Vote Down

Login to post a comment!