Windows Server 2012: how to prevent IIS from choosing SHA-1 for connections?
Solution 1:
A way to overcome this is to:
- Disable everything except TLS 1.0 in server protocols in IISCrypto. Don't touch client protocols.
- Since Edge doesn't allow TLS 1.0 and TLS 1.1 by default, apply the following which will stop working in version 91 in a few months.
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"SSLVersionMin"="tls1"
Another option would be to force the website in IE11 compatibility mode in Edge, IE11 is much less picky.