Invisible a écrit :

> I just visited a random website that uses HTTPS, and it seems all the
> certificates are RSA 2,048 bits. Which is interesting, because the
> encryption itself is just RC4 (128 bits). And this is "high-grade
> encryption"??

The purpose of the https is mainly authentication.
Encryption using RC4 is weak anyway, and unpublished (STO: bad!)
RC4 is just quick enough to not bother too much a server.

the 128 bits of the RC4 key are used to generate a pseudo-random bit
sequence, and applying the output to XOR.
It might stop your child from eavesdropping, but that pretty all.
For instance, it is used in Wep (wifi)... and wep-keybreaker are everywhere.

-- 
A: Because it messes up the order in which people normally read text.<br/>
Q: Why is it such a bad thing?<br/>
A: Top-posting.<br/>
Q: What is the most annoying thing on usenet and in e-mail?

Post a reply to this message