[537] in WWW Security List Archive
Netscape and 40 bit encryption
daemon@ATHENA.MIT.EDU (John Hemming (Chief Executive Mark)
Sat Mar 25 07:40:40 1995
From: "John Hemming (Chief Executive MarketNet )" <JohnHemming@mkn.co.uk>
Date: Sat, 25 Mar 95 08:44:34 -800
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
> >Am I off base on this?
>
>
> No, I don't think anyone would question the 40bits is not enough.
> Thats why the
> US government will let people use it...
>
> Its not Netscape who want this `feature'. Its the NSA. If you live in
> the free
> world then it dosen't apply :-)
Actually I think the constraint is more one of export than
usage. Notwithstanding that - length of keys is an issue of
implementation not the protocol itself.
Longer keys are allowed for purely US implementations.
