????2. ??????
????????????Windows?????????????????????Щ???????????????gpedit.msc?????ν???”Computer Configuration” -> ”Administrative Templates” -> “Network” -> “SSL Configuration Settings”????????????????????”SSL Cipher Suite Order”??:

???????????????”SSL Cipher Suite Order”??????????????????????Cipher?????????????Cipher??????

??????????????????????????????Щ????Cipher??????????????“Enabled”???????“Options”????д??Cipher???б?????????????У?????????????Powershell?????????????????
????Set-ItemProperty -path HKLM:/SOFTWARE/Policies/Microsoft/Cryptography/Configuration/SSL/0001002 -name Functions -value "XXX??XXX??XXX"
???????Cipher????????????????????????????????Cipher????????????????????????????
????????????????????????????????????????????????????????????????????RSA??Diffie-Hellman??ECDH??PSK??
????????????????????????????????????????????????????????????????????????????????DES 56/56?? RC2 56/128?? RC4 128/128?? AES 128/128?? AES 256/256
????????????????MAC??????????????????????????????????????б?????????????MD5??SHA???
????PRF??α?????????????????????“master secret”??
???????????????????????????????????????????????????????????????????￡??????????Cipher??????????????????????????????Cipher ?? TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA ??????????????????
????????TLSЭ????
???????ECDHE??RSA??????????????
????????????AES?????????????????????256????
????MAC??????????????????SHA??
?????????Cipher???????????????????????IIS??????Web???????????????????????????????????????????????[C1?? C2?? C3]????Windows Server????????[C4?? C2?? C1?? C3]???C1??C2???????????????????IIS?????????C1??????C2???????C2??IIS???????????????????????????????C4???????????????????????????????C2?????????????????????IIS?????C2???????????????????“ServerHello”????Э???У???????????????????5?е?????
????3. ???
?????????????????????????????????????????TLS 1.2Э??????????????????????????????顣??????????????????????????Cipher?????????????????????????????????????Web????????????????????е???????У??????????????????????????Cipher?????RC4-based?????????????????AES-based??Cipher?????????????????????128????????256???????????????????????——???????????CPU????????????????????????????????Cipher?????????????
?????????Amazon??Google??Щ????????????????RC4-based???????????????????????????????檔??????ζ???????????????????????????????????????o???????????