4 ms·
At least we can say that South Korean web security has moved on a little bit since the truly dark days of SEED. > In the late 1990s, the Korea Internet & Secur
by yrro 4y ago
At least we can say that South Korean web security has moved on a little bit since the truly dark days of SEED.
> In the late 1990s, the Korea Internet & Security Agency
developed its own 128-bit symmetric block cipher named SEED
and used ActiveX to mount it in web browsers. This soon
became a domestic standard, and the country's Financial
Supervisory Service used the technology as a security
screening standard. ActiveX spread rapidly in Korea. In
2000, export restrictions were lifted, allowing the use of
full-strength SSL anywhere in the world. Most web browsers
and national e-commerce systems adopted this technology,
while Korea continued to use SEED and ActiveX.
https://en.wikipedia.org/wiki/Web_compatibility_issues_in_South_Korea#E-commerce_encryption_technology https://en.wikipedia.org/wiki/Web_compatibility_issues_in_So...
I think the country only started moving away from SEED/ActiveX in 2011?!
- anecdotal1 4y agoThat's what US crypto embargoes create
- palant 4y agoNote: I am the author of this article. Yes, they successfully moved away from ActiveX. Not sure about SEED, I think I still saw it in one of the applications. But there seems to be another contributing factor, the Korea Exchange Bank hacking incident in 2005. I explained it here: https://palant.info/2023/01/09/touchen-nxkey-the-keylogging-anti-keylogger-solution/#the-backdrop https://palant.info/2023/01/09/touchen-nxkey-the-keylogging-...
- kyllo 4y agoI lived in Korea in 2008-2010 and can confirm the ActiveX thing was still in widespread use then. It was a pain because every website effectively only worked in IE, meanwhile I had a Mac and couldn't log into any secure websites such as my local bank account from it.
- deleted 4y ago[deleted]