Microsoft Is Hardening AD FS’s Token-Signing Keys Today. Its Own Escape Hatch Says It Leaves You Vulnerable.

• Source: NewsAPI.org • 28 words, ~1 min read

October's security update auto-remediates the ACL protecting AD FS token-signing key material. Windows Server 2012 shops are on their own, and the registry opt-out leads with a warning.