[647] in cryptography@c2.net mail archive
U.S. Broker goes 40-bit only
daemon@ATHENA.MIT.EDU (Anonymous)
Tue Apr 29 19:32:26 1997
Date: Tue, 29 Apr 1997 15:13:25 -0700
To: cryptography@c2.net
From: nobody@hidden.net (Anonymous)
>From: "Service3" <service@etrade.com>
>Subject: Re: Weakened web security
*************************************************************
E*TRADE SECURITIES
*************************************************************
Dear <snip>:
Thank you for your e-mail message, and your comments.
We are looking into reestablishing the handshaking capability for
128-bit encryption. I do not have a time table for when that will take
place.
However, we beg to differ with your view that the 40-bit encryption is
"insecure". Since our security system uses one-time pads, it would be
extremely difficult for anyone to decode a single packet, much less an
entire transmission series. We have yet to have a single security
breach at E*Trade, and even if there was, we are insured fully for
such a situation. We are fully confident that our customers are as
safe and secure as we can make them.
If you have any additional questions or comments, please e-mail us at
service@etrade.com, or, if you would prefer, please feel free to call
a Customer Service Representative, Monday through Friday, 8:00am to
12:00am Midnight (Eastern Time), toll-free, at 1-800-STOCKS5
(1-800-786-2575).
Sincerely,
<snip>
E*Trade Customer Service
