Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Does anyone have a table of the default levels of encryption which the various browsers out there support? For instance I know that IE5 and lower struggle even to cope with 40 bit encryption but the latest browsers easily do 256 and beyond.

The reason I ask is that I'm looking to get a wildcard certificate for my domain and the price difference is huge between a server gated certificate (where it enforces a minimum of 128bit) and a non-gated certificate (where the browser sets the encryption level).

Obviously I like the idea of paying £300 less for the non-gated certificate, but only if I can be sure that the majority of my users (FF3 / Opera / Chrome / IE7+) are going to get good encryption.

share|improve this question

According to the wikipedia article on Server_gated_cryptography, you don't need the Server Gated Cryptography certificate.

The 128bit certificates do allow for 40bit encryption. If you're using Apache, then you'll need to use the SSLCipherSuite configuration directive to set the acceptable ciphers to only be the stronger ones.

See this for more info on Apache SSL:

share|improve this answer
+1 The server can specify the encryption levels to be used, the browser just selects from the list provided by the server. – Chris S Jan 17 '11 at 15:22

You can get an idea of what version of TLS/SSL is supported on which browser.

Verisign shows us when SGC will be required.

This link shows what a bank considers "supported"

not sure what Chrome supports, but I believe it's SSL2.0

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.