-----Original Message-----
From: Eric Murray [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 25, 2000 10:04 PM
To: [EMAIL PROTECTED]
Subject: Re: I'm still so very confused about certificates
>The certificate has no effect on the type of symmetric encryption that SSL
>negotiates.
Funny... I was just about to post a question concerning the same
matter :-) I know how SSL works and that the certificate does'nt affect the
symmetric encryption used after authentication but I'm still confused. I
intend to get a signed certificate from Verisign but if I understand
correctly (their web pages) they are actually selling certificates for 40
bit and for 128 bit encryption... how can this be? The 40 bit certificate is
said to use 40 bit encryption with export-version browsers and 128 with
domestic ones. The 128 bit certificate is said to always form a 128 bit enc.
How can it be possible that with the 128 bit certificate one wound'nt have
the ability of using 40 bit session keys?
Thanks You for answering --> I'd be happy to hear that I have
misunderstood something :-)
Yours Ville
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]