Closed JPRuskin closed 2 weeks ago
We remove the -Hardened option from the Set-SSLSecurity script. Instead, we always pick the options that were in Hardened.
-Hardened
Set-SSLSecurity
There's no reason we shouldn't be recommending that users secure their environment to the extent possible.
If they want to run a less secure environment, they can follow a different guide.
I installed QSG locally using the unattend option and a wildcard certificate.
Fixes #105
@steviecoaster if you had a minute to eye this over, I think it's ready to merge!
Description Of Changes
We remove the
-Hardened
option from theSet-SSLSecurity
script. Instead, we always pick the options that were in Hardened.Motivation and Context
There's no reason we shouldn't be recommending that users secure their environment to the extent possible.
If they want to run a less secure environment, they can follow a different guide.
Testing
I installed QSG locally using the unattend option and a wildcard certificate.
Operating Systems Testing
Change Types Made
Change Checklist
Related Issue
Fixes #105