Description

This article is from the Secure Sockets Layer Discussion List FAQ, by Shannon Appel SAppel@consensus.com with numerous contributions by others.

6.1.2) I just downloaded a newly released version of Netscape's browser and my bank's server tells me my browser does not have adequate security. What's wrong?

Here are the likely explanations for this:

a) You have downloaded an "export" flavor of the browser with only
40-bit encryption, but your bank requires that you use the "domestic"
flavor of the browser with 128-bit encryption. In this case, you must
download the domestic 128-bit version.

b) Your bank's server keeps a list of the browser versions with which
it will work, and that list has not yet been updated to include the
very latest version(s) of Netscape's browser. In this case, please
ask your bank to add the newest version of Netscape's browser to
their server's list of acceptable versions. Note that many banks will
not accept "Preview Release" versions because they do not contain
domestic (128-bit) encryption.

 

Continue to:

• prev: 6.1.1) I just downloaded a new version of Netscape's browser, and it doesn't have 128-bit encryption. What version(s) of the browser have 128-bit encryption?
• Index
• next: 6.1.3) I downloaded a version of Netscape's browser that is newer than version 4.05. Now, when I go to certain https web sites that used to work for me (like my bank) I get an error message telling me that "Netscape has received bad data from the server." I've been told the problem is with SSL v3 in my new browser, and that I should disable SSL v3 in my browser. What's wrong with SSL v3 in these new browsers? Should I disable it?

Share and Enjoy

Tags

security, SSL, Secure Sockets Layer, protocol