Re: Questions for Magaziner?

17 Dec 2003

      -----BEGIN PGP SIGNED MESSAGE-----

In <36041E82.F4F072ED@netscape.com>, on 09/19/98 
   at 04:13 PM, Tom Weinstein <tomw@netscape.com> said:
...
...
Arnold G. Reinhold wrote:
One question I'd like asked is whether the US Gov will approve 56-bit RC-4
for export on the same terms as 56-bit DES. That would allow export
versions of web browsers to be upgraded painlessly, making international
e-commerce 64 thousand times more secure than existing 40-bit browsers.
(56-bit DES browsers would require every merchant to upgrade their SSL
servers and introduce a lot of unneeded complexity.)
...
Actually, it wouldn't be any easier to deploy 56-bit RC4 than DES. 
Either would require roughly the same changes to both clients and
servers.
I'm sorry but I must be missing something here ...

Why not just use products that have strong crypto without GAK? What is the
point of using this weak junk when one does not have to??

- -- 

http://www.pgpi.com   -- Strong secure e-mail encryption
http://www.opera.com  -- Opera web browser with strong crypto & no back doors
http://www.apache.org -- Most popular Http server on the Internet
http://www.ssleay.org -- Free strong SSL library that can be used with the Apache server.

Then we have the usauly suspects:

http://www.jya.com/nscp-foia.htm -- Netscape's GAK plans.
http://www.kra.org               -- KRAP gang.

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://www.openpgp.net
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://www.openpgp.net/pgp.html
- ---------------------------------------------------------------

Tag-O-Matic: Bugs come in through open Windows.