Why do .azurewebsites.net certificates support less secure hashing algorithms and can this be changed

Question

Several of our websites/applications hosted in Azure have been left using the default .azurewebsites.net certificates. Our security team recently flagged these certificates as having weak hashing algorithms enabled. I know we could use our own certs, but that would mean republishing a new URL to users and making changes in other applications, which I would like to avoid if possible. I was wondering if it is possible to remove/turn off some of the weaker algorithms on the .azurewebsites.net certificates.

Answer 1

Hello Matthew Greaves,

Thanks for your question.

Unfortunately, you cannot directly modify the default certificates on .azurewebsites.net domains.

You could try to Map an existing custom DNS name to Azure App Service so as not to change the core url.

Regards,

Abiola

You can mark it 'Accept Answer' and upvote if this helped.