From: Robert Hettinga <rah@shipwright.com>
Date: Thu, 13 Mar 1997 07:32:07 -0800 (PST)
To: cypherpunks@toad.com
Subject: 128 bit Server and Browser Solution?
Message-ID: <v03020911af4dcb826f58@[139.167.130.247]>
MIME-Version: 1.0
Content-Type: text/plain



--- begin forwarded text


From: source@iaccess.za
Date: Thu, 13 Mar 97 10:15:26 GMT+2
To: set-dev@terisa.com
Subject: 128 bit Server and Browser Solution?
Sender: owner-set-dev@terisa.com
Precedence: bulk

I believe this is of interest to folk on this list as we continue to develop
our SET solution.


A 128 bit Secure Browser and Server solution. Works with ALL 128 bit SSL 3.0
Servers - Selling outside of the USA - include FREE Server and
Browser certificates.
 *************************************************************************

VeriSure Overview

__________________________________________________________________

Table of Contents

1.      Full 128-bit encryption world wide

2.      Proven SSL 3.0 technology

3.      Protection against Java viruses

4.      Features

5.      Hardware and Software Requirements

6.      Support

7. For more Information and for a Test Drive

__________________________________________________________________

1. Full 128-bit encryption world wide

VeriSure is a Java-based applet that is automatically loaded when
your customers need to access a secure site with 128 bits encryption.

Browsers exported from the USA are crippled by 40 bit
encryption because USA export regulations prevent export of 128 bit
encryption. 40 bit encryption is easily broken with enough time
and computing power.

VeriSure extends those browsers to 128 bits to provide
highly secure encryption (currently unbreakable), regardless of
whether they are in the USA.

This means you can offer your customers secure online transaction
facilities such as banking, investment and other financial services.
__________________________________________________________________

PowerWeb which is a high performance full 128-bit secure server
*********************************************************************
CompuSource also offers PowerWeb which is a full 128-bit secure server
with unlimited RSA encryption using industry standard SSL 3.0 (and 2.0),
providing HTTP, FTP, SMTP and POP3 services, with many extensions
for rapid database application development and dynamic page content.
__________________________________________________________________

2. Proven SSL 3.0 technology

VeriSure uses proven SSL 3.0 technology which provides
authentication of servers and implements encrypted message digests
on every packet to ensure data integrity against tampering,
as well as 128 bit encryption for privacy and unlimited bits RSA
encryption for authentication.

VeriSure does not use SSL 2.0 which has several well known
flaws, especially regarding message digests.

The message digest authenticates the message against tampering
or forgery which is especially important for financial transactions.
Let's say a third party intercepts a message across the network and
decrypts it. The value to that third party is limited to the
content of the information of that single message, because that
third party cannot create new messages for two reasons:
the encryption key changes with every message and every message
is authenticated with a message digest which cannot be reverse
computed.
__________________________________________________________________

3. Protection against Java viruses

Each VeriSure is protected by only allowing connections to specified
sites. This protection is built into VeriSure by way of public key
cryptography which means that other malicious applets or viruses
cannot manipulate this information.

VeriSure also performs SSL 3.0 authentication of the remote server upon
every connection, thereby assuring customers of the true identity
of the server they are connecting to.
__________________________________________________________________

4. Features

VeriSure is built upon industry standards which means that you don't
need custom server solutions. Being built upon standard Java 1.02 or later,
it runs on any customer machine that has a web browser that supports
Java, regardless of operating system.
128 bit Browser and Server Solution

The VeriSure classes are available for licensing for third party
application development.
__________________________________________________________________

5. Hardware and Software Requirements

VeriSure is available for any platform that supports Java and has
a Java-enabled web browser, including: AIX, Solaris,
Windows NT, Windows 95, OS/2, MVS, OS/400.
__________________________________________________________________

6. Support

CompuSource provides support to licensees of VeriSure, who in turn
must support their customers.
__________________________________________________________________

7. For more Information and for a Test Drive:

VeriSure       http://www.compusource.co.za/verisure/index.htm
PowerWeb       http://www.compusource.co.za/powerweb/index.htm




Regards,


The Power Team

SMTP:   source@iaccess.za               Tel:    +27-21-713-2111
HTTP:   http://www.compusource.co.za    FAX:    +27-21-713-0052
FTP:    ftp://ftp.compusource.co.za     Postal: Building 6, Room 201
                                        CompuSource (Pty) Ltd
                                        PO Box 510, Constantia, 7848, South
Africa.

For faster response, please include previous correspondence to when replying.

PGP Public Key can be found at ftp://ftp.compusource.co.za/pub/pgp/public.key

--- end forwarded text



-----------------
Robert Hettinga (rah@shipwright.com), Philodox
e$, 44 Farquhar Street, Boston, MA 02131 USA
"Never attribute to conspiracy what can be
explained by stupidity." -- Jerry Pournelle
The e$ Home Page: http://www.shipwright.com/rah/