SSL Encryption

Secure Socket Layer (SSL) allows you to have secure access to a web site or certain pages on a web site. Connections always use the prefix https:// (Secure HTTP) instead of http://. You can usually find out if a server has SSL available by trying their normal url and adding the s. You can tell if you are connected using a SSL connection by looking at the bottom bar of your browser. Depending on what browser you are using you will see a closed lock instead of an open lock.

SSL encryption uses ciphers, which differ from codes in that they are systematic and mathematical rather than arbitrary and symbolic. The strongest ciphers are based on the random generation of two large prime numbers. When the two prime numbers are multiplied, the product is a number so large that ordinary computers cannot factor it back to the two original primes. When data is encrypted using a mathematical formula and the extremely large product, it cannot be deciphered without the two prime numbers. As long as the original prime numbers are kept secret, no one can decipher an SSL-encrypted message without an extravagant expediture of resources. The large numbers used to encrypt and decrypt data are called keys. Their complexity also makes them useful for authentication purposes.

Check Your Browser

You can quickly check the strength of the crypto in your browser at Fortify's page.

(SSL) uses several encryption algorithms. The 128 bit RC4 encryption algorithm is the strongest that most browsers offer. Older versions Internet Explorer will not even connect a lot of 128 bit SSL servers. If you're not in North America and routinely use Netscape's export-grade web browsers, (i.e. the ones you can download from the Internet), then you should try Fortify.

Upgrade Your Browser

If you would like to download a full version of Replay And Assoc. now are now offering numerous versions of 128 bit SSL enabled Netscape Communicator/Communicator.

Fortify for Netsape. Provides world-wide, unconditional, full strength 128-bit cryptography to users of Netscape Navigator (v3) and Communicator (v4).

128 bit Netscape patch can be found here:
Just unpack and run the file, and it will apply the patch to your browser software.
After this, you need to do some configuration:
  • First reboot your computer!
  • Open Netscape Navigator
  • Go to Communicator -> Security Info
  • Click Navigator
  • Click Configure SSL v2
  • Make sure 128bit and 168bit are available and checked. Then close this window.
  • Click Configure SSL v3
  • Make sure 128bit and 168bit are available and checked. Then close this window.
  • Click Messenger
  • Click Select S/MIME Ciphers
  • Make sure 128bit and 168bit are available and checked. Then close this window.

If you've installed the 40bit version of IE4, all you have to do is download and apply a small patch that enables 128bit. You can download it directly from here by clicking on the appropriate file name. Just run the file, and it will apply the patch to your browser software.

People within the USA or Canada download the 128bit patch here:
people outside the USA or Canada download the patch here:


Further Reading

Fortify's Excellent Read Me File





security.tao.ca index.



maintained by securitysite at tao dot ca
Comments and additions always welcome, our feedack form.