Re: super-certs

> Does mod_ssl or some other materials explains how to hack netscape's browser? Yes. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automa

Re: super-certs

Thank you. One more stupid question. Does mod_ssl or some other materials explains how to hack netscape's browser? I would like to know that very much. Thanks again. __ Miss Yuhang Gao CERNET Regional Network Center, Dept. of Computer Sci. & En

RE: super-certs

>I have seen many discussions on super-certs, but does anyone know about he >key features that makes a cert super? Or how does these certs come into >being? Can we use openssl to produce these kind of certs? This is the second time I have explained it in the past two weeks. It

Re: super-certs

I have seen many discussions on super-certs, but does anyone know about he key features that makes a cert super? Or how does these certs come into being? Can we use openssl to produce these kind of certs? Hazel __ Miss Yuhang Gao CERNET Regional

Re: super-certs

Hi there, At 02:59 PM 4/21/00 -0400, Thomas Reinke wrote: >The intent is to allow export located financial institutions to >use strong cryptography, while keeping it out of the hands >of others. (Hmmm...I'll refrain here) > >AFAIK, only Microsoft IIS and Netscape Enterprise server support >SGC at

Re: super-certs

Dr Stephen Henson wrote: > > Any correctly written OpenSSL server containing an approved certificate > supports the protocol. With some restrictions... > > SGC is only supported in OpenSSL 0.9.5 and later because SGC violates > the SSL protocol and a work around was only added in that version.

Re: super-certs

Thomas Reinke wrote: > > My understanding is that > > a) The tech is called "SGC: Server Gated Crtypography" (MS > terminology) or "stepup" (Netscape terminology) > It isn't just terminology. They achieve similar things in different ways. SGC violates the SSL protocol whereas stepup kee

Re: super-certs

My understanding is that a) The tech is called "SGC: Server Gated Crtypography" (MS terminology) or "stepup" (Netscape terminology) b) It is designed to enable strong encryption in a controlled fashion outside of the U.S. c) It requires both the client and the server to support

RE: super-certs

>Both Verisign and Thawte(verisign) are currently offering so-called >Super Certificates that enable 128 bit encryptation with export (40 >bit) browsers. It works like this. The super-certs are signed by a special CA. Recent releases of IE and Netscape recognize that CA. If an SSL c

super-certs

Both Verisign and Thawte(verisign) are currently offering so-called Super Certificates that enable 128 bit encryptation with export (40 bit) browsers. Can someone explain how this works and if it works with apache-ssl with recent openssl. Thanks Michael [EMAIL PROTECTED]