home *** CD-ROM | disk | FTP | other *** search
- Path: nntp.hut.fi!usenet
- From: oahvenla@neppari.cs.hut.fi (Osma Ahvenlampi)
- Newsgroups: comp.sys.amiga.misc
- Subject: Re: Netscape is crap (Was: Announce: AWeb 1.0 released!)
- Date: 09 Apr 1996 13:58:48 +0300
- Organization: What, me, organised?
- Sender: oahvenla@neppari.cs.hut.fi
- Distribution: inet
- Message-ID: <jdjag0lk6jb.fsf@neppari.cs.hut.fi>
- References: <4jv79h$k7s@daily-planet.execpc.com>
- <jdjybob6btj.fsf@hyppynaru.cs.hut.fi> <watt.829011944@winternet.com>
- NNTP-Posting-Host: neppari.cs.hut.fi
- Mime-Version: 1.0
- Content-Type: text/plain; charset=US-ASCII
- In-reply-to: watt@subzero.winternet.com's message of 9 Apr 96 01:05:44 GMT
- X-Newsreader: Gnus v5.1
-
- In article <watt.829011944@winternet.com> watt@subzero.winternet.com (Bacon Runner) writes:
- >Read what he wrote: "They use an inadequate number of bits, and key
- >selection is not at all random."
-
- You might as well talk about NCSA Mosaic 1.0, then. The random number
- generator problem in Netscape was fixed ages ago. And I was mostly
- speaking of SSL the specification, which Netscape designed, not their
- implementation of it, since their implementation is out of my reach
- anyway.
-
- >What is the key, 128 bits? As I have heard it described, imagine if of the
- >2^128 possible combinations, Navigator only allowed the use of 256 of
- >them? That reduces the key to be effectively an 8-bit one. Navigator has
- >been shown to limit the total number of combinations to something like
- >2^42, not much better than the export version. On top of that, it
- >selects keys based on not-so-random calculations involving process IDs
- >and the current date or time.
-
- Like I said, that was a bug in Netscape 1.2N, I think, and the key
- space was actually limited to about 32 bits, if I recall correctly. It
- was fixed in the 1.2.1 security update, and since then, hasn't
- everyone switched to 2.0 anyway?
-
- --
- An atheist is a man with no invisible means of support.
- | "Osma Ahvenlampi" <mailto:oa@iki.fi> <http://www.iki.fi/oa/> |
- | Amiga&BeBox&ClassAct&Voodoo&ARTech cool stuff: I-Net225&AWeb |
- --
-