Application Error using 40-bit Netscape with 128-bit SSL Site

They have: 5,633 posts

Joined: Jan 1970

We have a secure web site hosted on IIS4/NT4 which uses 128-bit SSL encryption. The pages are mostly asp. If a customer connects using Netscape with 40-bit encryption, Netscape crashes with an application error. 128-bit versions of Netscape are fine. Both 40 and 128 bit Internet Explorer are fine too as the encryption level drops to 40-bit if that is all that the browser supports. We've tried various versions 4.x of Netscape with the same results. Has anyone else experienced this?

Suzanne's picture

She has: 5,507 posts

Joined: Feb 2000

40 bit isn't being made anymore. I would detect for it (check the Netscape site for more information on detecting for different encryptions) and redirect those using the lower encryption to upgrade.

My bank, for instance, alerted me for 3 months that I wouldn't be able to use their online services if I used the 40 bit browser, and directed me to upgrade. This was years ago, so I know it can be done.

I would suggest the crashing is in the encryption, without detection.

hth,

[smile] Suzanne

Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.