Re: SGC, and do we really get it right?

[Richard Levitte - VMS Whacker]

From: Dr Stephen Henson <[EMAIL PROTECTED]>

drh> Neither sends a "reset message" since there's no such thing :-)

Ah, so said document lies.  Good to know.

drh> However in my experience the Netscape handshake was broken on MSIE and
drh> would only work if the start and end ciphers where RC4, that is only 40
drh> bit and 128 bit RC4 were enabled on the first connection. After the
drh> first connection it recognised the server as being SGC and would use any
drh> cipher suite.

Interesting.

-- 
Richard Levitte   \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis             -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]