In article <67ee9e3cc8499f9d72a11a2df56c48fe@anonymous> you wrote: : Being outside North America, I have an "export" version of : Internet Explorer/Netscape Navigator. These offer 40 bit : encryption. (40 bit RC4, I understand). : My financial institution has a 128 bit Verisign certificate. : To my surprise, they claim this offers 128 bit encryption to /me/. : [in transactions to https://secure.mybank.com.xx] : I thought my 40 bit client limited the security to 40 bits. : Who is right? Please explain. All browsers have the 128 bits encryption inthem, but in the non-US version it can only enabled by a 'special cert'. Banks are the only institutions that are currently allowed to recieve such an cert. This is also why fortify.net works as it does, anyways, we also offer 128 bit versions of the popular browsers *g* -- Alex de Joode | International CryptoRunners | http://www.replay.com 'A little paranoia can longer your life'