[4994] in WWW Security List Archive
Re: SSL encryption.
daemon@ATHENA.MIT.EDU (Steve Neruda)
Mon Apr 7 16:41:21 1997
Date: Mon, 07 Apr 1997 11:00:14 -0400
From: Steve Neruda <nerudas@nationwide.com>
To: roba@roba.demon.co.uk
CC: Web Security Mailing List <www-security@ns2.rutgers.edu>
Errors-To: owner-www-security@ns2.rutgers.edu
Rob Absalom wrote:
>
> I'm currently working on developing an application that will be dealing
> with sensitive data. The web is perfectly suited for the application.
> The problem that I have with the web though is how to secure the data
> being transmitted between the server and the browzer.
>
> I know about SSL, but the application is for use outside USA, so as I
> understand it SSL will only be 40 bit encryption. This is not considered
> suitable. Previously I have used Entrust from NorTel to secure network
> communication. My question is either : 1) does anyone know if it is
> possible to integrate Entrust with any of the available web browzers. 2)
> what other encryption packages are available that would provide a better
> service than SSL, and integrate with a Web browzer.
> --
> *********************************************
> Rob Absalom
>
I've heard there's a group in the Soviet Socialist Republic that are
retrofiting netscape with strong encryption. I'm not sure what the
crypto laws are like in the UK but in the US it looks like it would be
legal to reimport it.
SteveN
--
Steve Neruda Steve_Neruda@Nationwide.Com
Senior Internet Consultant The Internet Technologies Group
"They gave me a book of checks. They didn't ask for any deposits."
--Congressman Joe Early