Re:Your Mother’s Maiden Name Is Not a Secret
by nitwit005 on Friday December 29, 2017 @08:32PM
(#16033251)
It's not a US vs Europe thing. There have been past incidents with Korean websites asking what city you were born in, and since the Seoul area has half the population, that worked for roughly half the users.
[ Parent
| on HN ]
Re:Your Mother’s Maiden Name Is Not a Secret
by Aardwolf on Friday December 29, 2017 @08:35PM
(#16033264)
True, South Korea is also something special... everyone was required to have internet explorer with activeX for a very long time there to do banking and online shopping
Re:Your Mother’s Maiden Name Is Not a Secret
by kuschku on Saturday December 30, 2017 @05:28AM
(#16034667)
The alternative to that would have been no SSL at all.
The US required that all exported crypto would be limited, so South Korea instead built their own crypto.
And browsers couldn't implement that themselves (also due to export regulations), so South Korea had to implement it as plugin for the then most-used browsers, which was mostly IE.
Re:Your Mother’s Maiden Name Is Not a Secret
by Denvercoder9 on Saturday December 30, 2017 @06:24AM
(#16034801)
The US doesn't limit exported crypto anymore since 2000, and South Korea was still using the ActiveX-based solution as late as last year.
Re:Your Mother’s Maiden Name Is Not a Secret
by kuschku on Saturday December 30, 2017 @06:32AM
(#16034826)
Actually, the US still partially restrict it (I as a German had to file dozens of forms with the US DoD due to that already), but you are correct, TLS up to 1.3 is entirely public worldwide.
But obviously, by 2000, many sites were already using the South Korean crypto, and deprecating it would be just as complicated as deprecating TLS 1.0 or SHA1 TLS Certificates in the US. The browser vendors consider that impossible — the South Korean situation is just as problematic.