SSL Encryption levels - 40 or 128 bit Encryption?
SSL Encryption levels - 40 or 128 bit Encryption?
Author
Discussion

SlidingSideways

Original Poster:

1,345 posts

263 months

Thursday 14th December 2006
quotequote all
Hi,
We're looking to SSL our company website. We don't take credit cards/payment and hold very little (accessible via the site) personal information. All we're basically looking to do is secure the sign-on process and stop people being able to sniffthe information we do send out (car details - think HPI check info).

Is 128bit overkill? (128 bit Verisign cert are almost 3 times the price of 40bit ones)
Or would people be dubious of a site offering less than this level?

Thanks,
Jim.

GregE240

10,857 posts

298 months

Thursday 14th December 2006
quotequote all
I'd have to recommend 128 bit for commercial use.

40bit is crackable by brute force, 128 bit less so.

128 is HUGELY more secure than 40.

Tripps

5,814 posts

303 months

Thursday 14th December 2006
quotequote all
Avoid VeriSign and look at other providers (can't think of any right now sorry), many only offer 128bit now and they'll be significantly cheaper than VeriSign.