Re: Browser security type
This WebDNA talk-list message is from 2000
It keeps the original formatting.
numero = 31866
interpreted = N
texte = Thanks for your reply John. I should have given more details. I'm using WebStar 4.2/WebCat 3.08 on Mac OS 9.04. What you're saying is true if you set your encryption options in WebStar for your 128 bit certificate to communicate at all levels of encryption. We use 56 bit certificates for most secure areas on the server, but for this application our client requires us to use 128 bit, so we set our encryption options to communicate at only 128 bit for this certificate. Anyone using a standard browser will get an error about the encryption algorithms. My goal here was to give the users a little knowledge about this and their browser type before they receive the error and start emailing the client saying that the site doesn't work (as you know, the general web surfing public usually doesn't understand how SSL works and most won't figure out this error on their own). I saw a site once use a cgi application for browser security compatibility, but I can't find anything anywhere.Again, thank you for your reply!-RWJohn Peacock wrote:> I don't understand what you are asking for; when a browser negotiates > with a server, they find the highest level of security they can agree > upon. In other words, if you are using an US export version of > Netscape, and the server has a 128 bit server cert (not a Super Cert), > the server will communicate with the browser using only 56 bits. The > export restrictions are going away now anyway; O'Reilly already has a > 128 bit international version of WebSite available for download. And > if you are really concerned, you can get a Super Cert, which will > upgrade the client on the fly to support 128 bits. > > John Peacock > > Robert Wade wrote: > > > > Been to the archives and no luck... > > > > Does anyone know of a way (preferrably WebCatalog, but open to other > > options) for a visitor to a site to test their browser to see if it is > > 128 bit? > > > > I've got several areas of a site that are 128 bit, and I want users to > > be able to click a test your browser link or button and get a response > > back on their security type, before they attempt to enter these areas. > > > > Thank You, > > > > Robert Wade > > CABIN6 Design > > > > |[ //\ ||} || ||\| V| > > > > robert@cabin6.com > > > > ------------------------------------------------------------- > > This message is sent to you because you are subscribed to > > the mailing list
. > > To unsubscribe, E-mail to: > > To switch to the DIGEST mode, E-mail to > > Web Archive of this list is at: http://search.smithmicro.com/ > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > Web Archive of this list is at: http://search.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Thanks for your reply John. I should have given more details. I'm using WebStar 4.2/WebCat 3.08 on Mac OS 9.04. What you're saying is true if you set your encryption options in WebStar for your 128 bit certificate to communicate at all levels of encryption. We use 56 bit certificates for most secure areas on the server, but for this application our client requires us to use 128 bit, so we set our encryption options to communicate at only 128 bit for this certificate. Anyone using a standard browser will get an error about the encryption algorithms. My goal here was to give the users a little knowledge about this and their browser type before they receive the error and start emailing the client saying that the site doesn't work (as you know, the general web surfing public usually doesn't understand how SSL works and most won't figure out this error on their own). I saw a site once use a cgi application for browser security compatibility, but I can't find anything anywhere.Again, thank you for your reply!-RWJohn Peacock wrote:> I don't understand what you are asking for; when a browser negotiates > with a server, they find the highest level of security they can agree > upon. In other words, if you are using an US export version of > Netscape, and the server has a 128 bit server cert (not a Super Cert), > the server will communicate with the browser using only 56 bits. The > export restrictions are going away now anyway; O'Reilly already has a > 128 bit international version of WebSite available for download. And > if you are really concerned, you can get a Super Cert, which will > upgrade the client on the fly to support 128 bits. > > John Peacock > > Robert Wade wrote: > > > > Been to the archives and no luck... > > > > Does anyone know of a way (preferrably WebCatalog, but open to other > > options) for a visitor to a site to test their browser to see if it is > > 128 bit? > > > > I've got several areas of a site that are 128 bit, and I want users to > > be able to click a test your browser link or button and get a response > > back on their security type, before they attempt to enter these areas. > > > > Thank You, > > > > Robert Wade > > CABIN6 Design > > > > |[ //\ ||} || ||\| V| > > > > robert@cabin6.com > > > > ------------------------------------------------------------- > > This message is sent to you because you are subscribed to > > the mailing list . > > To unsubscribe, E-mail to: > > To switch to the DIGEST mode, E-mail to > > Web Archive of this list is at: http://search.smithmicro.com/ > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > Web Archive of this list is at: http://search.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Robert Wade
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
A question on sub-categories (1997)
[WebDNA] TCPCONNECT & Timeout (2015)
formatting a number (1999)
RequiredFields template (1997)
WebCatalog 4.0 is now available (2000)
Adding Shipping Fields (1999)
Bit off subject -- Faxing orders (1997)
Using Plug-In while running 1.6.1 (1997)
[OT] Xserve (2002)
[ShowNext] feature in 2.0 (1997)
Searching for a space (2000)
Can't load tmpl files (1997)
Price recalc based on quantity (1997)
target=_blank and form variables (1997)
[addlineitems] (1997)
Setting up shop (1997)
WC 2.0 frames feature (1997)
RE: what characters are replaced for tab and CR? (1998)
9 digit zip (2002)
totals (1997)