Re: Proposed Extensions to TLS for OpenPGP

[Steve Schear <schear@xxxxxxxx>]

At 2:25 PM -0800 12/31/97, EKR wrote:
>Will Price <wprice@xxxxxxx> writes:
>> At 11:15 PM -0800 12/30/97, Eric Rescorla wrote:

[big snip]
>Try to solve the following two examples:
>Netscape and Microsoft. Netscape has downloads off their web site.
>They want them to be easy. That means that the user can just
>point and click. That means the crypto must be exportable or none
>at all. Which do you suggest?
>Next consider Microsoft. They embed their browser in the OS (at
>least for now.). They want to ship that to foreigners. Again,
>the crypto has to be exportable or nonexistent. Which do you
>suggest?
>
>So, what do you suggest these companies do?

How about funding programs such as Fortify, which patch browsers to enable 128-bit SSL with all willing servers (whether or not they have supercerts)?

--Steve