SSL encryption : 56-bit and 128-bit ?
A customer raised an interesting point...If a browser only supports 56-bit, and that user visits my site (through https, of course) where I employ a 128-bit SSL certificate, will their session be secure? I mean, I know it would be limited to 56, but what I'm asking is would the mismatch (56 vs 128) fail entirely, meaning there was no encryption whatsoever, or could my 128 certificate at least give them their 56?
Are any browsers still only 56-bit and if they are... will SSL fail if the SSL is 128-bit. He doesnt want to lose any transactions even if its only one person a year using 56-bit
Any thoughts?