Re: RE: RE: SSL-induced loading errors

[John Kestner]

[EMAIL PROTECTED] writes:
>> Actually, I just tried adding:
>> 
>> SSLRequire %{SSL_CIPHER} >= 128
>> 
>> And it appears to work on just about every new and old browser/platform!
>> Hope this helps some future newbie...
>
>Even on non-128 bit browsers?

Yes - it drops back to 40-bit. Doesn't seem quite right, I know - perhaps
I'm misinterpreting it. But this was a suggestion in the archives at
http://www.mail-archive.com/modssl-users@modssl.org/msg10187.html

If this isn't as secure as I think, please point it out to me.

John

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]