5 expanded posts ยท every known parent and child
Hi, Lurking here for quite some time until now a real problem has come up and I need help here. I'm not in the US of A and the Netscape commerce server that my employer recently purchased has only 48bit key (as told by the salesman). My question is whether it is possible to add-in my own security module (RSA) and secondly, how difficult is it? The salesman cannot answer me. Thanks a lot.
runner@asiapac.net writes: > I'm not in the US of A and the Netscape commerce server that my > employer recently purchased has only 48bit key (as told by the > salesman). My question is whether it is possible to add-in my own > security module (RSA) and secondly, how difficult is it? The > salesman cannot answer me. You made a mistake in buying Netscape commerce in the first place, but don't despair! You can still get Apache, an excellent web server, and an unencumbered SSL module that you can use without restriction outside the U.S. (if you want to run it inside the U.S. you need to pay a fee because of the patents on RSA). Perry
> > You made a mistake in buying Netscape commerce in the first place, but > don't despair! You can still get Apache, an excellent web server, and > an unencumbered SSL module that you can use without restriction > outside the U.S. (if you want to run it inside the U.S. you need to > pay a fee because of the patents on RSA). > At least point the guy at a URL: Outside the US: http://www.algroup.co.uk/Apache-SSL/ Inside the US: http://apachessl.c2.net/ -- Sameer Parekh Voice: 510-601-9777x3 Community ConneXion, Inc. FAX: 510-601-9734 The Internet Privacy Provider Dialin: 510-658-6376 http://www.c2.net/ (or login as "guest") sameer@c2.net
> You made a mistake in buying Netscape commerce in the first place, but > don't despair! You can still get Apache, an excellent web server, and > an unencumbered SSL module that you can use without restriction > outside the U.S. (if you want to run it inside the U.S. you need to > pay a fee because of the patents on RSA). The browsers present a bit of a problem as well -- the free Netscapes that people download uses small keys, so it won't matter if you use an Apache or Netscape server if people browse your site with Netscape navigators. I think there are full strength Mosaic's available, but I've never used them. Also, you should check to see if you can get a verisign certificate for the international version of apache-ssl -- if you can't, that might cause you problems as well. The best answer for these sorts of problems (at least for those of you not constrained by ITAR) might be java form processing applets that use their own crypto routines to submit the data.
runner@asiapac.net wrote:
> I'm not in the US of A and the Netscape commerce server that my employer
> recently purchased has only 48bit key (as told by the salesman).
For exportable clients and servers, the symmectric keys for doing bulk
encryption are 40 bits.
> My question is
> whether it is possible to add-in my own security module (RSA)
The symmetric (RSA) keys are at least 512 bits.
> and secondly, how
> difficult is it? The salesman cannot answer me.
Netscape cannot get permission to distribute software with "pluggable"
crypto. This and the above restrictions are the result of U.S.
regulations.
PK
--
Philip L. Karlton karlton@netscape.com
Principal Curmudgeon http://home.netscape.com/people/karlton
Netscape Communications
They that can give up essential liberty to obtain a little
temporary safety deserve neither liberty nor safety.
- Benjamin Franklin