Great Circle Associates Firewalls
(December 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: off topic: ssl setup on web server - now browser crypto strength
From: Douglas McNaught <doug @ tc . net>
Date: 01 Jan 1998 01:09:46 -0500
To: "Simon J. Gerraty" <sjg @ quick . com . au>
Cc: firewalls @ GreatCircle . COM
In-reply-to: "Simon J. Gerraty"'s message of "Thu, 1 Jan 1998 12:50:07 +1100 (EST)"
References: <199712312209 . JAA26278 @ basil . uniq . com . au> <199801010150 . MAA14312 @ gate . quick . com . au>

"Simon J. Gerraty" <sjg @
 quick .
 com .
 au> writes:

> Pauline van Winsen writes:
> >> Of course folk outside the U.S. are stuffed anyway, until a decent
> >> non-U.S. based browser (not limited to 40bit RC4) comes along.
> >> I don't think there is any interest in any govt anywhere to see this issue
> >> solved to the satisfaction of net users though.
> 
> >has anyone checked out fortify?
> 
> >http://www.geocities.com/Eureka/Plaza/6333/
> 
> Yes I had a lok at it and it works very well.  I had no trouble setting up
> 128bit sessions to an apache server.  Problem is that whether the author
> wrote this thing outside the U.S. or not, he chose a U.S. based site? as
> home for it :-)  so we are back to all the shadows of ITAR.

Not true.  The info lives on Geocities but the actual downloads come
from .au and .uk.  

> The other problem with something like fortify is that it may provoke the U.S.
> govt into revoking export of all versions of netscape etc.

That would make things *really* interesting.  I personally think the
gov't will not go so far; it would engender a well-financed and very
public legal challenge to the ITAR regs.  At this point the reason
ITAR is still around for crypto is that most people don't understand
or care about the issues.  Prohibiting export of Netscape would put
the whole issue in the public eye in a big way, which I don't think
they want. 

-Doug
-- 
sub g{my$i=index$t,$_[0];($i%5,int$i/5)}sub h{substr$t,5*$_[1]+$_[0],1}sub n{(
$_[0]+4)%5}$t='encryptabdfghjklmoqsuvwxz';$c='fxmdwbcmagnyubnyquohyhny';while(
$c=~s/(.)(.)//){($w,$x)=g$1;($y,$z)=g$2;$w==$y&&($p.=h($w,n$x).h($y,n$z))or$x==
$z&&($p.=h(n$w,$x).h(n$y,$z))or($p.=h($y,$x).h($w,$z))}$p=~y/x/ /;print$p,"\n";


References:
Indexed By Date Previous: Re: firewall audit service referral
From: Frank Willoughby <frankw @ in . net>
Next:
From: (nil)
Indexed By Thread Previous: Re: off topic: ssl setup on web server - now browser crypto strength
From: "Simon J. Gerraty" <sjg @ quick . com . au>
Next: Firewall-1 Log Analysis
From: jnthomas1 @ juno . com (Jeff Thomas)

Google
 
Search Internet Search www.greatcircle.com