1996-04-09 - Re: Bank transactions on Internet

Header Data

From: =?ISO-8859-1?Q?J=FCri_Kaljundi?= <jk@digit.ee>
To: sameer@c2.org
Message Hash: e136bdeb7d51c73536a4e1f4b2544986b98cb60cb3167a738edc9e7abed1dfc5
Message ID: <Pine.GSO.3.92.960409171558.9284C-100000@happyman>
Reply To: <199604081941.MAA00812@atropos.c2.org>
UTC Datetime: 1996-04-09 20:18:09 UTC
Raw Date: Wed, 10 Apr 1996 04:18:09 +0800

Raw message

From: =?ISO-8859-1?Q?J=FCri_Kaljundi?= <jk@digit.ee>
Date: Wed, 10 Apr 1996 04:18:09 +0800
To: sameer@c2.org
Subject: Re: Bank transactions on Internet
In-Reply-To: <199604081941.MAA00812@atropos.c2.org>
Message-ID: <Pine.GSO.3.92.960409171558.9284C-100000@happyman>
MIME-Version: 1.0
Content-Type: text/plain


On Mon, 8 Apr 1996 sameer@c2.org wrote:

> > > Suddenly some banks here in Estonia have decided that they must start
> > > offering banking services over Internet already during the next months.
> > > What worries me is that some of them are talking about using 40-bit SSL as
> > > the main security mechanism.
>
> 	Please point these banks to Apache-SSL
> (http://www.algroup.co.uk/Apache-SSL/). They can run SSL without
> using 8-cent RC4.

What is the use of 128-bit server, as there are still no 128-bit WWW
clients freely available in Europe? (Workhorse has 128-bit SSL, but the
client is still far from perfect).

Of course I believe that SSL server with source code available is still
much more secure, as your own consultants can have a look at the code,
that's why I personally would rate Apache-SSL higher than commercial
applications like Thawte consulting Sioux.

Jüri Kaljundi
jk@digit.ee







Thread