Is there a difference between SSLv3 and TLSv1? How does IIS6.0 control what type of security is used for a website enabled with HTTPS?
MS says that there is a hierarchy in which the security and encryption level is negotiated before connection is established. What is this hierarchy?
Is SSLv3 available in IIS6.0 by default on Windows Server 2003?
SSLv3 and TLSv1 are not the same, however TLSv1 is based on SSLv3.
This is a protocol which is backward compatible, and gives a way to determine which version to use according to the ‘handshake’ that takes place between the client and the server.
Read more here (this helped me understand it better): http://en.wikipedia.org/wiki/Secure_Sockets_Layer