> If you're in the US, you have to pay homage (literally) to RSA to > develop any implementation of TLS. is this really true? the default mandatory TLS ciphersuite is TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, which (AFAIK) doesn't use any RSA-controlled technology. Keith