I have a site set up in IIS 4. I have set up a 128bit Server Certificate, and I have set the site up to Require a Secure Connection, and require 128bit level encryption. Everything works fine, with one exception. I have a user running Win98 using IE5.0 with 56bit encryption that is accessing the site. If the browser only supports 40bit encryption, it will block access. But this 56bit browser, which I didn’t even know existed, is accessing the site even though I have it set to require 128. I’d really like to know why, and what to do to prevent this. Any help is appreciated.
