Re: Lowest encryption setting?

2000-01-20 Thread Joseph R. Junkin
EKR wrote: "Joseph R. Junkin" [EMAIL PROTECTED] writes: I want to run a site with the lowest possible encryption for the highest performance. Encryption and performance are not mutually opposed in the way you might think. OK, but why not? I am quite new to this (still learning) and do

Re: Lowest encryption setting?

2000-01-20 Thread EKR
"Joseph R. Junkin" [EMAIL PROTECTED] writes: EKR wrote: "Joseph R. Junkin" [EMAIL PROTECTED] writes: I want to run a site with the lowest possible encryption for the highest performance. Encryption and performance are not mutually opposed in the way you might think. OK, but

Re: Lowest encryption setting?

2000-01-20 Thread Joseph R. Junkin
EKR wrote: SSL uses EXACTLY the same algorithm for RC4-40 as RC4-128. It simply expands the 40 bit key to a 128 bit key before feeding it to RC4. Thus, it's not any faster to use 40 bits. Actually it's very slightly slower because the expansion takes some time. OK, makes sense. Now, not

cancellation from mailing lists

2000-01-20 Thread Donovan KIK Wei Tat
[Donovan KIK] pls kindly delete myself off the mailing list. thks. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List

Re: Lowest encryption setting?

2000-01-20 Thread EKR
Simon Weijgers [EMAIL PROTECTED] writes: However, if you're talking to an export browser then you'll end up with 512 bits of security but it will be as slow as 768 bits because of ephemeral RSA mode. [0] -Ekr [0] Yes, I know that 512 bit ephemeral RSA isn't exactly the same

AW: ssl proxy .. again

2000-01-20 Thread Andreas . Nolte
.. could you please tell me how you configured your apache? Im using the same versions, and SSL is running. How do you configure your clients? Thanx, Andreas -Urspr üngliche Nachricht- Von: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]] Gesendet am: Mittwoch, 19. Januar 2000 22:48

AW: ssl proxy .. again

2000-01-20 Thread Andreas . Nolte
.. well, I got this running for local pages. But what I want is doing the same thing for proxy requests. - user is configured to use internet access by proxy - user wants to surf to www.example.net - user needs to log into my server - the authentication should be SSL encrypted - my server looks

Re: Slooowly webserver

2000-01-20 Thread Paolo Di Martino
Joaquim Garcia i Ortells wrote: Hy everybody. after installing Apache(Apache 1.3.9), mod_ssl,( mod_ssl 2.4.10) on a Solaris 2.6 i activate the client certification and the problem was that my server turn so slowly. The problem is that my server request the certificate many times

[BugDB] No way to remember old SSLVerifyClient mode after new connections (PR#335)

2000-01-20 Thread modssl-bugdb
Full_Name: Paolo Di Martino Version: 2.4.6 OS: Linux RedHat 6.0 Submission from: (NULL) (193.207.124.39) When I access to some location with SSLClientVerify require directive, the browser continue to ask me a certificate for every object loaded from the location (html frames,

[BugDB] No way to remember old SSLVerifyClient mode after new connections (PR#334)

2000-01-20 Thread modssl-bugdb
Full_Name: Paolo Di Martino Version: 2.4.6 OS: Linux RedHat 6.0 Submission from: (NULL) (193.207.124.39) When I access to some location with SSLClientVerify require directive, the browser continue to ask me a certificate for every object loaded from the location (html frames,

Re: Lowest encryption setting?

2000-01-20 Thread Simon Weijgers
However, if you're talking to an export browser then you'll end up with 512 bits of security but it will be as slow as 768 bits because of ephemeral RSA mode. [0] -Ekr [0] Yes, I know that 512 bit ephemeral RSA isn't exactly the same security wise as 512 bit static, but they're close