Secure Socket Layer (SSL) allows you to have secure access to a web site or certain pages
on a web site. Connections always use the prefix https:// (Secure HTTP)
instead of http://. You can usually find out if a server has SSL
available by trying their normal url and adding the s.
You can tell if you are connected using a SSL
connection by looking at the bottom bar of your browser. Depending on what browser
you are using you will see a closed lock instead of an open lock.
SSL encryption uses ciphers, which differ from codes in that they are
systematic and mathematical rather than arbitrary and symbolic. The
strongest ciphers are based on the random generation of two large
prime numbers. When the two prime numbers are multiplied, the
product is a number so large that ordinary computers cannot factor it
back to the two original primes. When data is encrypted using a
mathematical formula and the extremely large product, it cannot be
deciphered without the two prime numbers. As long as the original
prime numbers are kept secret, no one can decipher an
SSL-encrypted message without an extravagant expediture of
resources. The large numbers used to encrypt and decrypt data are
called keys. Their complexity also makes them useful for
authentication purposes.
Check Your Browser
You can quickly check the strength of the crypto in your browser at Fortify's
page.
(SSL) uses several encryption algorithms.
The 128 bit RC4 encryption algorithm is the strongest that most browsers offer.
Older versions Internet Explorer will not even connect a lot of 128 bit SSL servers.
If you're not in North America and routinely use Netscape's export-grade web browsers,
(i.e. the ones you can download from the Internet), then you should try Fortify.
Upgrade Your Browser
If you would like to download a full version of
Replay And Assoc. now are now offering numerous versions of 128 bit SSL enabled
Netscape
Communicator/Communicator.
Fortify for Netsape. Provides world-wide, unconditional, full strength 128-bit cryptography to users of Netscape Navigator (v3) and Communicator (v4).
|
128 bit Netscape patch can be found here:
|
|
Just unpack and run the file, and it will apply the patch to your browser
software.
|
|
After this, you need to do some configuration:
|
- First reboot your computer!
- Open Netscape Navigator
- Go to Communicator -> Security Info
- Click Navigator
- Click Configure SSL v2
- Make sure 128bit and 168bit are available and checked. Then close this window.
- Click Configure SSL v3
- Make sure 128bit and 168bit are available and checked. Then close this window.
- Click Messenger
- Click Select S/MIME Ciphers
- Make sure 128bit and 168bit are available and checked. Then close this window.
|
If you've installed the 40bit version of IE4, all you have to do is download and apply a small patch that enables 128bit. You can download it directly from here by clicking on the appropriate file name. Just run the file, and it will apply the patch to your browser software.
|
People within the USA or Canada download the 128bit patch here:
|
|
|
|
people outside the USA or Canada download the patch here:
|
|
|
Further Reading
Fortify's Excellent Read Me File