"Luo, Feng (Exchange)" <[EMAIL PROTECTED]> writes: > You are absolutely right, there is not so called 40-bit certificate. The key > strength is controlled by server and browser, forget about SGC , it's old. You can't forget about SGC, because there are still SGC-only export browsers out there.
-Ekr -- [Eric Rescorla [EMAIL PROTECTED]] http://www.rtfm.com/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]