برداشتی که من داشتم اینه که شما خود SSL رو با Server Gated Cryptography که یک مکمل اضافی برای SSL هست اشتباه گرفتی.
http://en.wikipedia.org/wiki/Server_gated_cryptography
How strong are InstantSSL server certificates?
InstantSSL server certificates are 1024 bit capable and support 128 bit browsers.
The strength of the public key in the certificate is defined by you when you generate the key pair for your server. If you generate a 1024-bit key pair and submit the associated CSR (Certificate Signing Request), then the certificate you receive contains the 1024-bit public key. If you generate a 512-bit key pair then the certificate contains the 512-bit public key.
http://certs.centurywebdesign.co.uk/faq.html
-------------------------------------------
What is the encryption strength of GeoTrust certificates?
All GeoTrust certificates are 128-bit. For each and every session, the server and browser negotiate and choose the highest common encryption strength between them. So if a 40-bit browser user hits your SSL-secured site, the resulting connection will automatically become a 40-bit strength encryption.
GeoTrust recommends that end-user Subscribers select the 1024-bit encryption strength or the equivalent descriptor option when generating their certificate requests. When the certificate's key length is 1024 or longer, the SSL session key will be 128 bit. If the certificate key length is 512, the SSL session key will be 40 bit or 56 bit.
If you are running Windows, see Microsoft's bulletin Q300398: "You install a 128-bit high encryption certificate onto Internet Information Server (IIS) version 4.0 or 5.0, then browse with a 128-bit enabled Web browser to IIS by using https://. However, the Web browser only makes a 40-bit or 56-bit Secure Sockets Layer (SSL) session with IIS (size 7927 bytes, updated 6/13/2001 12:54:00 PM GMT)"
http://www.sargasso.net/kb/q104658.j...d=GBBNKPHGBPOF
-----------------
Server-Gated Cryptography
Server-Gated Cryptography (SGC) is an extension of SSL that allows financial institutions with export versions of IIS to use strong 128-bit encryption. Although SGC capabilities are built into IIS, a special SGC certificate is required to use SGC. For more information about SGC, see Server-Gated Cryptography.
http://technet.microsoft.com/en-us/l.../cc783543.aspx
و طبق گفته شخص شما :
Standard SSL Certificates provide a minimum of 40-bit and up to 256-bit SSL encryption
خیلی واضح و روشن داره میگه اگر شما از 1024 bit استفاده کنی مرورگرها عملا تا 128 رو پشتیبانی میکنن و اگر از 512 bit استفاده کنی 40 یا 56 رو جواب میدن.
ولی اگر از SGC استفاده کنی شرایط فرق میکنه.
اینم ببین ضرر نداره :
http://www.devx.com/webdev/Article/17085/1763/page/2
این هم کتاب خوبی هست در این خصوص :
http://books.google.com/books?id=pL8...um=1&ct=result
البته تمامی موارد فوق تنها در صورتی صادق هستند که شما از بین هزاران مورد استفاده SSL تنها از آن در وب بخواهید استفاده کنید.
باز هم شاید من در اشتباه باشم ولی اطلاعاتی که من دارم در همین حد هست.
موفق باشید
پاسخ با نقل قول
