Description

This article is from the Secure Sockets Layer Discussion List FAQ, by Shannon Appel SAppel@consensus.com with numerous contributions by others.

6.1.7) Are the 512-bit RSA keys used by exportable servers generated on the fly by Netscape's servers? How often are they changed? Does the Netscape server take care of changing them automatically? (Netscape SSL implementation issues)

In Netscape's server products, if the server's public key is longer
than 512 bits, the server generates a temporary 512-bit export key at
start-up time. This key is regenerated only when the server is
restarted.

 

Continue to:

• prev: 6.1.6) Does Netscape use "regular" RSA libraries (such as BSAFE) or "custom" RSA code? More specifically, is Netscape using BSAFE 3.0?
• Index
• next: 6.1.8) How can additional root CA certificates be added to the browser's certificate database? (Netscape SSL implementation issues)

Share and Enjoy

Tags

security, SSL, Secure Sockets Layer, protocol