
On Mon, 8 Apr 1996 sameer@c2.org wrote:
Suddenly some banks here in Estonia have decided that they must start offering banking services over Internet already during the next months. What worries me is that some of them are talking about using 40-bit SSL as the main security mechanism.
Please point these banks to Apache-SSL (http://www.algroup.co.uk/Apache-SSL/). They can run SSL without using 8-cent RC4.
What is the use of 128-bit server, as there are still no 128-bit WWW clients freely available in Europe? (Workhorse has 128-bit SSL, but the client is still far from perfect). Of course I believe that SSL server with source code available is still much more secure, as your own consultants can have a look at the code, that's why I personally would rate Apache-SSL higher than commercial applications like Thawte consulting Sioux. Jüri Kaljundi jk@digit.ee