The Book

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

===Vulnerability in SSL/TLS could allow information disclosure===
http://support.microsoft.com/kb/2643584 

By default, this security update sets the Opt-in mode at the schannel level, because of application compatibility issues. To disable this security update for all applications system-wide, you must add a DWORD value named **SendExtraRecord** that has a value of 2 to the following registry subkey:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL

To add this schannel registry entry registry entry, follow these steps:

Click **Start**, click **Run**, type **regedit** in the **Open** box, and then click **OK**.

Locate and then click the following subkey in the registry:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL

On the **Edit** menu, point to **New**, and then click **DWORD Value**.
Type **SendExtraRecord** for the name of the DWORD, and then press ENTER.
Right-click **SendExtraRecord**, and then click **Modify**.
In the **Value data** box, type **2** to disable the split record in schannel, and then click **OK**.

Exit Registry Editor.