From: "William H. Geiger III" <whgiii@invweb.net>
Date: Sun, 20 Sep 1998 15:15:58 +0800
To: Tom Weinstein <tomw@netscape.com>
Subject: Re: Questions for Magaziner?
In-Reply-To: <36041E82.F4F072ED@netscape.com>
Message-ID: <199809202012.QAA10139@domains.invweb.net>
MIME-Version: 1.0
Content-Type: text/plain



-----BEGIN PGP SIGNED MESSAGE-----

In <36041E82.F4F072ED@netscape.com>, on 09/19/98 
   at 04:13 PM, Tom Weinstein <tomw@netscape.com> said:

>> Arnold G. Reinhold wrote:
>>
>> One question I'd like asked is whether the US Gov will approve 56-bit RC-4
>> for export on the same terms as 56-bit DES. That would allow export
>> versions of web browsers to be upgraded painlessly, making international
>> e-commerce 64 thousand times more secure than existing 40-bit browsers.
>> (56-bit DES browsers would require every merchant to upgrade their SSL
>> servers and introduce a lot of unneeded complexity.)

>Actually, it wouldn't be any easier to deploy 56-bit RC4 than DES. 
>Either would require roughly the same changes to both clients and
>servers.

I'm sorry but I must be missing something here ...

Why not just use products that have strong crypto without GAK? What is the
point of using this weak junk when one does not have to??

- -- 

http://www.pgpi.com   -- Strong secure e-mail encryption
http://www.opera.com  -- Opera web browser with strong crypto & no back doors
http://www.apache.org -- Most popular Http server on the Internet
http://www.ssleay.org -- Free strong SSL library that can be used with the Apache server.


Then we have the usauly suspects:

http://www.jya.com/nscp-foia.htm -- Netscape's GAK plans.
http://www.kra.org               -- KRAP gang.


- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://www.openpgp.net
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html
- ---------------------------------------------------------------
 
Tag-O-Matic: Bugs come in through open Windows.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a-sha1
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000

iQCVAwUBNgVjmo9Co1n+aLhhAQH3NwQAoKla/hjuDRnaUaQ6AgvmI1XRk9rEFQzs
1hFEX5gTqhi/3V/iMRlP4WfJKT6tfQMLae7vL8wNtKzXwqElWZHXxONb8wIoITfH
sQlsE0bnKLAjyYtNc0v1MwSO/oKf1j7Npy8wOZowAxb0lcQNRsQJmOy3h620LLHO
Q0mxf/hhmGs=
=y4X/
-----END PGP SIGNATURE-----