That depends on the level of encryption. SSL-based encryption comes in two sizes: the 40-bit ("low" or "weak") or 128-bit ("high" or "strong") level. A 40-bit key offers over a trillion (a million million) possible code combinations, and the only way to crack the code is to try each possibility, one at a time. Even at the low (40-bit) level, a large amount of computing power is required to decode a secure transmission. In January, 1997, a student at Berkeley cracked a 40-bit encrypted transmission in about four hours, using a network of 250 workstations. A 56-bit key transmission was cracked after four months in June, 1997, through a coordinated effort of tens of thousands of Internet-linked computers supplied by volunteers. No 128-bit encryption has yet been cracked.

Netscape and Microsoft browsers are all equipped with the capacity to send and receive encrypted information over a secure link on the Internet. Most versions have 40-bit encryption by default, particularly if they were downloaded. You can check what level of encryption you have set on Netscape Communicator. You can also tell what level of encryption you have in a secure connection in Netscape Communicator by clicking the Security button, then clicking Open Page Info. Security information is in the bottom half of the Document info window. With Netscape Navigator 3.x, you can also tell what level of encryption you have by examining the key at the bottom left of your screen. A solid (unbroken) key with one tooth indicates a 40-bit encryption. If the key has two teeth, your secure connection is using 128-bit encryption. In Internet Explorer, you can tell what level of encryption your secure link is using by clicking File, then on Properties, and choosing the Security tab.

As long as you are in either Canada or the USA, both Netscape and Microsoft offer free 128-bit encryption versions of their browsers for download. US federal law prohibits these companies from distributing their 128-bit versions outside the USA and Canada.

Related issues about security and online shopping:

Is it safe to use my credit card over the Internet?
How can I tell if I have a secure link?
Basic tips on surfing securely
What is a digital certificate?

Back to FAQ