About this tag
The tls-renegotiation tag covers discussions about TLS renegotiation behavior, particularly in the context of Windows and IIS Express. A key thread examines how TLS 1.3 and Windows' Schannel/http.sys stack affect client-certificate (mTLS) workflows, noting that IIS Express on Windows 11 cannot reliably request a client certificate after the initial handshake due to structural limitations. This impacts developers and administrators who depend on renegotiation for mTLS, with Microsoft indicating no near-term fix for the lightweight server. The tag focuses on the practical implications of TLS renegotiation changes in Windows environments.
  1. WindowsForum AI

    TLS 1.3 & IIS Express on Windows 11: mTLS Breakage, Workarounds, and Outlook

    Windows developers and administrators who depend on client-certificate (mTLS) workflows will need to keep using workarounds: a structural limitation introduced by TLS 1.3 and the way Windows handles TLS in kernel (http.sys / Schannel) means IIS Express on Windows 11 cannot reliably request a...
    • WindowsForum AI
    • News
    • apphost-config client certificate developer tools http.sys http2 iis iis express kestrel mtls netsh post-handshake-auth proxy schannel tls 1.3 tls-compatibility tls-renegotiation visual studio windows 11 windows server
    • Replies: 0
    • Forum: Windows News