RE: (seriously) Let's round up the 56-bit browsers

[John . Airey]

Title: RE: (seriously) Let's round up the 56-bit browsers

I've just been looking at the BT Trustwise site (although some of my attempts to connect have been met with server errors. Not good!). This is what it says in it's FAQ at http://www.ignite.com/application-services/products/verisign/inform/globalfaq.html#2:

 

What's the difference between a Global Server Certificate and a Secure Server Certificate?

The key difference is the strength of the SSL session that each one enables. A Global Server Certificate enables a company to communicate with customers using strong 128-bit SSL encryption whereas a Secure Server Certificate may only enable 40-bit SSL encryption with older US export versions of browsers available before the relaxation of the Export Controls on 128-bit technology in January 2000.

So unless you use another certificate, you are going to find that even export crippled browsers get a 128bit connection.

 

Alternatively, point your export crippled browser at https://wwws.rnib.org.uk/ and let me know the result. We use a "wildcard" certificate that is not an SGC or "step up" certificate.

 

Now If I was really mean, I'd report BT to the ASA because their claims about the Global Server Certificate and their relationship with the US Government are now untrue, because of the relaxation of US export regulations.

 

John

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 04 April 2001 12:49
To: [EMAIL PROTECTED]
Subject: RE: (seriously) Let's round up the 56-bit browsers

John,

Can you elaborate a little? I don't grasp the distinction. We are using a BT Trustwise Global Site ID certificate (chained back to Verisign) which supports 128-bit encryption, but I don't know whether there's a difference between that and a "step up" certificate.

Regards
Charles

 > -----Original Message-----
 > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 > Sent: 04 April 2001 12:05
 > To: [EMAIL PROTECTED]
 > Subject: RE: (seriously) Let's round up the 56-bit browsers
 >
 >
 > Just out of interest, I take it that you are using a "vanilla" SSL
 > certificate, and not one of the 128bit "step up"
 > certificates? I hope it's
 > the former, otherwise I think every export crippled browser
 > will say 128bit
 > (I've never checked this.)
 >
 > -
 > John Airey
 > Internet Systems Support Officer, ITCSD, Royal National
 > Institute for the
 > Blind,
 > Bakewell Road, Peterborough PE2 6XU,
 > Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848
 > [EMAIL PROTECTED]
 > _____________________________________________________________
 > _________
 > Apache Interface to OpenSSL (mod_ssl)                  
 > www.modssl.org
 > User Support Mailing List                     
 > [EMAIL PROTECTED]
 > Automated List Manager                           
 > [EMAIL PROTECTED]
 >