BT's Trustwire 40 bit secure communications claim

[Mark J Cox]

> > https://transend.labs.bt.com/
> > uses a RSA 128-bit cert.  How have they managed that?
> Server-Gated Cryptography.

Actually it isn't using SGC, the site returns a standard certificate which
doesn't contain any SGC extensions.  They use a version of the Open Market
webserver which is SSLv2 only but supports RC4-MD5 (128 bit) as well as
EXP-RC4-MD5 (40 bit).

Mark
Mark J Cox, ......................................... www.awe.com/~mark
Latest news on the Apache Web Server ............... www.apacheweek.com