RE: 40 bit vs 128 bit ssl

2002-10-15 Thread Kevin Gilchrist
Agreed, forgot this was a consumer site. I've been living in an extranet world for too long... -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED]] Sent: Monday, October 14, 2002 6:23 PM To: CF-Talk Subject: RE: 40 bit vs 128 bit ssl If you're not expecting clients from

Re: 40 bit vs 128 bit ssl

2002-10-14 Thread Matt Robertson
I thought certs downgrade themselves, depending on the client browser's capabilities? You shouldn't have to do anything. --- Matt Robertson[EMAIL PROTECTED] MSB Designs, Inc., www.mysecretbase.com --- --

RE: 40 bit vs 128 bit ssl

2002-10-14 Thread Dave Watts
We had a consultant come in who was proficient in coldfusion web development look at our site. He suggested at first that we require 128 bit security for the SSL portions of our site using IIS. This ensures that people can't go to a form or checkout page that is supposed to be ssl by

RE: 40 bit vs 128 bit ssl

2002-10-14 Thread Kevin Gilchrist
as any strong crypto user has to file their keys with the government (I'd be surprised if that's still true). -Original Message- From: Matt Robertson [mailto:[EMAIL PROTECTED]] Sent: Monday, October 14, 2002 5:07 PM To: CF-Talk Subject: Re: 40 bit vs 128 bit ssl I thought certs downgrade

RE: 40 bit vs 128 bit ssl

2002-10-14 Thread Dave Watts
If you're not expecting clients from these countries there shouldn't be any reason for not having access to 128-bit browsers. It's not a matter of people not having access, but rather whether you want to force people to upgrade their browser just to buy something from you. There are enough