Re: 128-bit encryption not supported by Mozilla 1.3 ?

2003-03-26 Thread KUROSAKA Teruhiko
Michael Lefevre wrote:

> it seems that is what they do.  what's really silly is that if you go on
> to their browser check page -
> http://home.da-us.citibank.com/da/whatdo/index.htm and choose "check
> encryption", then it says the browser encryption is ok.

This is very convincing evidence that my installation of
Mozilla 1.3 does support 128-bit encryption and they cannot
deny it.  I reported the problem to them.
Thanks!

-kuro





Re: 128-bit encryption not supported by Mozilla 1.3 ?

2003-03-26 Thread Ben Bucksch
Michael Lefevre wrote:

After I upgraded Mozilla from 1.2.1 to 1.3, I tried accessing
https://home.da-us.citibank.com/signin/indexkiosk.htm
with Mozilla 1.3 but the site returned an error page stating:
	To use Direct Access, you need a browser that supports
	strong encryption (128-bit)
   

t seems that is what they do.  what's really silly is that if you go on
to their browser check page -
http://home.da-us.citibank.com/da/whatdo/index.htm and choose "check
encryption", then it says the browser encryption is ok.
Same behaviour with Beonex Communicator 0.8.2, based on Moz 1.0.2. 
Someone please give them a whack.




Re: 128-bit encryption not supported by Mozilla 1.3 ?

2003-03-26 Thread Michael Lefevre
In article <[EMAIL PROTECTED]>, KUROSAKA Teruhiko wrote:
> Hogarth wrote:
> 
>>>After I upgraded Mozilla from 1.2.1 to 1.3, I tried accessing
>>>https://home.da-us.citibank.com/signin/indexkiosk.htm
>>>with Mozilla 1.3 but the site returned an error page stating:
>>> To use Direct Access, you need a browser that supports
>>> strong encryption (128-bit)
>> 
>> 
>> I believe the silly webmaster forgot to future-proof his web browser
>> checking cgi script as 1.3 does infact support 128bit keys. 
> 
> They might be guilty.  But I still don't understand
> why Mozilla 1.2.1 had no problem with their site.
> Do they simply check the browser name and versions
> against their hard-coded list, rather than checking
> the encription strenth through a dedicated API?

it seems that is what they do.  what's really silly is that if you go on
to their browser check page -
http://home.da-us.citibank.com/da/whatdo/index.htm and choose "check
encryption", then it says the browser encryption is ok.

-- 
Michael



Re: 128-bit encryption not supported by Mozilla 1.3 ?

2003-03-26 Thread Hogarth
On Wed, Mar 26, 2003 at 12:16:27AM -0800, KUROSAKA Teruhiko wrote:
> They might be guilty.  But I still don't understand
> why Mozilla 1.2.1 had no problem with their site.
> Do they simply check the browser name and versions
> against their hard-coded list, rather than checking
> the encription strenth through a dedicated API?

Mostlikely. Like I said, their brwoser checker is poorly written and not
future proof.

-- 
Hogarth http://mozilla.weebeastie.net/

RAR!



Re: 128-bit encryption not supported by Mozilla 1.3 ?

2003-03-26 Thread KUROSAKA Teruhiko
Hogarth wrote:

After I upgraded Mozilla from 1.2.1 to 1.3, I tried accessing
https://home.da-us.citibank.com/signin/indexkiosk.htm
with Mozilla 1.3 but the site returned an error page stating:
To use Direct Access, you need a browser that supports
strong encryption (128-bit)


I believe the silly webmaster forgot to future-proof his web browser
checking cgi script as 1.3 does infact support 128bit keys. 
They might be guilty.  But I still don't understand
why Mozilla 1.2.1 had no problem with their site.
Do they simply check the browser name and versions
against their hard-coded list, rather than checking
the encription strenth through a dedicated API?
-kuro