From: Alex de Joode <usura@replay.com>
Date: Wed, 16 Sep 1998 13:32:26 +0800
To: cypherpunks@cyberpass.net
Subject: Re: 128 bit or 40 bit?
Message-ID: <199809161832.UAA23457@replay.com>
MIME-Version: 1.0
Content-Type: text/plain



In article <67ee9e3cc8499f9d72a11a2df56c48fe@anonymous> you wrote:


: Being outside North America, I have an "export" version of 
: Internet Explorer/Netscape Navigator. These offer 40 bit 
: encryption. (40 bit RC4, I understand).


: My financial institution has a 128 bit Verisign certificate.
: To my surprise, they claim this offers 128 bit encryption to /me/.
: [in transactions to https://secure.mybank.com.xx]

: I thought my 40 bit client limited the security to 40 bits.
: Who is right? Please explain.

All browsers have the 128 bits encryption inthem, but in the
non-US version it can only enabled by a 'special cert'. Banks
are the only institutions that are currently allowed to recieve
such an cert.

This is also why fortify.net works as it does, anyways,
we also offer 128 bit versions of the popular browsers *g*
--
Alex de Joode | International CryptoRunners | http://www.replay.com
         'A little paranoia can longer your life'