Re: AES 256-bit Certificate

From: WenJun Zhang[msft] (v-wzhang_at_online.microsoft.com)
Date: 03/24/05 

Date: Thu, 24 Mar 2005 06:55:14 GMT

Hi Bernard,

The 128 bits encryption of IIS and IE browser is about the min
session-key strength but not the certificate key length. :-)

Here is the related info in IIS doc:

Setting Encryption Strength
You can configure your Web server to require a 128-bit minimum
session-key strength, the default for members of the Microsoft
Windows Server 2003 family, for all Secure Socket Layer (SSL) secure
communication sessions. If you set a minimum 128-bit key strength,
however, users attempting to establish a secure communications
channel with your server must use a browser capable of communicating
with a 128-bit session key. The session key is not the same as an SSL
key pair, which is used to negotiate and establish a secure
communication link. For information about upgrading browsers to
128-bit encryption capability, visit the Windows Support Web site.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no
rights.