Microsoft Security Advisory 3174644 Updated Support for Diffie-Hellman Key Exchange Published: September 13, 2016 Version: 1.0 Executive Summary Microsoft is providing updated support to enable administrators to configure longer Diffie-Hellman ephemeral (DHE) key shares for TLS servers. The updated support allows administrators to increase the size of a DH modulus from the current default of 1024 to either 2048, 3072, or 4096. Note: All versions of Windows 10 support the new DH modulus settings and use 2048 as the DH modulus default setting.
Ron, thanks. I was almost ready to post a thread in the Software forum about MS contradicting itself and being very inconsistent in that article and other article(s) to which it points. It is driving me absolutely crazy. It seems someone at the no more existent QA department there got a wake-up call and it looks like someone is making urgent changes. For now I refrain from building up again and post that thread.
