128 bit SSL and export restrictions

[Sundar_7]

This is just a trivial question. I understand internet explorer distributed in USA uses 128 bit SSL encryption for HTTPS session and there is some software export restrictions which doesnt permit using this 128 bit SSL in other parts of the world.

On the other hand, I learned export restrictions apply only to hw and not for sw. How does it work out ?

Sundar.

[Steven E. Protter]

One thing is wrong in your post.

Software with encryption IS covered by the law.

Microsoft has to put in a reverse lookup check on their website and deny access to 128 bit encryption software in order to comply with the law.

Its a stupid law. It makes no sense. But people who violate it HAVE been prosecuted.

So please understand it.

On behalf of my government, I apologize for the silliness.

Understand also, that the people at Fort Meade Maryland(US NSA) can break 128 bit key encryption with brute force. They do it all time time.

Setting up a server that requires 128 bit encryption and https is not a problem with these laws. Where your end user gets the software is not your problem, so long as you don't provide it.

SEP

[Jeroen Peereboom]

Sundar,

have a look at http://www.microsoft.com/exporting/

It's all about software....

JP (from The Netherlands with 128 bit encryption IE)