from their web site, at http://www.netscape.com/flash2/newsref/pr/newsrelease428.html --- MOUNTAIN VIEW, Calif. (June 24, 1997) -- Netscape Communications Corporation (NASDAQ: NSCP) today announced the United States Department of Commerce has granted the company permission to export Netscape Communicator client software with 128-bit encryption capabilities. Available for immediate download from the Netscape Internet site, Netscape Communicator with strong encryption would allow users worldwide to enjoy far greater protection for their information when communicating with certified, strong encryption applications on Intranets and the Internet. Netscape also received approval to export Netscape SuiteSpot server software featuring 128-bit encryption capabilities to certified banks worldwide. VeriSign will be providing a special-use digital certificate which enables the encryption. This will allow Netscape Communicator users to access their banking information from almost anywhere in the world and communicate using strong encryption with those banks which have implemented Netscape SuiteSpot servers and completed the certification process. --- some pr crap deleted --- International users who have Netscape Communicator do not need to download a new version of Netscape Communicator to take advantage of the strong encryption capabilities being announced today. Negotiation of the strong encryption between international versions of Netscape Communicator and Netscape SuiteSpot servers approved for export to banks occurs through a unique mechanism based on a special-use digital certificate. etc... ----- So... is this new approval for export of 128-bit encryption only for encryption between the users and these banks, or is it general? If it's general, is GAK built in or not? And if not, how did they get approval? Ariel Glenn / AcIS R&D / Columbia University ariel@columbia.edu #include <stddisclaimer.h>