Screaming Penguin - Source Does Matter

This is another of those "yeah, tell me this is an accident" bugs. IIS apparently incorrectly deals with digital certificates and violates the SSL3 specification which crashes Netscape 4.7. This is a semi-to-be expected problem from Microsoft, hopefully no one is suprised by either an IIS bug or Microsoft disregarding standards. Netscape has released a patch so that communicator wont crash but of course the connection will still fail. Microsoft is "working on" a patch for IIS.This is ridiculous from both companies. Yes, more so from Microsoft, they shoulder more of the blame. But apparently nobody decided to test either software product before they released them (sorta the track record for Microsoft, but how come no one at Netscape tested communicator with IIS?)The problem as described on MSNBC (irony?) IIS 4 does not correctly support 56 bit certificates, so when Communicator tries to step up to the highest level of security (128-bit key length certificates), it simply crashes with an invalid page fault in NETSCAPE.EXE.   IIS Bug Crashes Netscape: MSNBC