Goodday,

I've changed the "SSL Cipher Suite Order" according to the 3046015-workaround (gpedit/Computer config./Adm. templates/Network/SSL Configuration/SSL Cipher Suite Order.

I've also enabled this setting and rebooted.

Since then I get no connection to the Technet-site. Eror: "This page canrsquo;t be displayed" (this is NOT a type-error!).

Who knows what's up?

Evert Rademaker.

Same thing happened to me. The 3046015-workaround seems to be in need for review.

Only way to be able to load pages again with IE is reverting the workaround, which certainly makes IE vulnerable again as per https://freakattack.com/

Firefox update for FREAK is NOT affected in this way.

Regards

Hi Evert and mdgrkb,

Thanks for your feedback about Microsoft Security Advisory 3046015.

Since this artcle was just released on 5 MARCH as a suggested workaround, till now we haven't received any similar issue or affecting report about this yet. However, I tested by myself and same result with you. We will note your issue and report it to database.

We will inform you at first time if Microsoft release any patch or update about this.

Best Regards

D. Wu

As is detailed in MS15-031, this vulnerability is now resolved by Windows Update KB3046049. Please let us know if you continue to experience issues after installation of this security update.

Brandon
Windows Outreach Team- IT Pro
Windows for IT Pros on TechNet

• Proposed as answer by mdgrkb 10 hours 9 minutes ago

Hi, Brandon.

Thanks for the follow up. The update did install some days ago and now https://freakattack.com/ reports IE to be safe from FREAK. Good job.

Regards

As is detailed in MS15-031, this vulnerability is now resolved by Windows Update KB3046049. Please let us know if you continue to experience issues after installation of this security update.

Brandon
Windows Outreach Team- IT Pro
Windows for IT Pros on TechNet

• Proposed as answer by mdgrkb Monday, March 23, 2015 9:10 PM