            NETSCAPE NAVIGATOR PERSONAL EDITION
			 README FILE


CONTENTS
1. Security Fix Description
2. Installation Instructions
3. Win32s
4. Windows for Workgroups with Network
5. Dial-On Demand
6. Troubleshooting
7. Miscellaneous

=======================================================================
	1. Security Fix Description
=======================================================================
TECHNICAL BACKGROUND

Netscape Navigator uses random information to generate session
encryption keys of either 40 or 128 bits in length. The random
information is found through a variety of functions that look into a
user's machine for information about how many processes are running,
process ID numbers, the current time in microseconds, etc. Previous
releases of Netscape Navigator were vulnerable because the size of
random input was less than the size of the subsequent keys. This
means that instead of searching through all the 2^128 possible keys
by brute force, a potential intruder only had to search through a
significantly smaller key space by brute force. This was a
substantially easier problem to solve because it takes much less
compute time and means 40-bit or 128-bit key strength is
substantially reduced.


SOLUTION

Netscape Navigator 1.22 (Windows), 1.12 (Macintosh and Unix), 1.12I
(localized builds for all 3 platforms) fixes the specific portion of
our software where this vulnerability existed. We have significantly
increased the amount of random information that cannot be discovered
by external sources from approximately 30 bits to approximately 300
bits.

Netscape has greatly expanded the techniques and sources used to
generate the random information. The number of unpredictable bits in
the random-number generator (RNG) makes it no longer the weak link
in the chain.

===========================================================================
    2. Installation Instructions
===========================================================================
Start Windows, Insert Disk 1, and choose File|Run from the main Windows 
menu. Type a:\setup (or b:\setup depending on your floppy drive) and press
Enter. Follow the onscreen instructions.

The Netscape Navigator Personal Edition Setup program has two options for 
installation:

1. The "Typical" option does a complete install of the software to the directory
   C:\NETSCAPE.  

2. The "Custom" option lets you choose where you want to install the software 
   and what parts of the software you want to install. If you already have a 
   SLIP or PPP account (for example with an Internet Service Provider, an 
   educational institution, or a government office), you should choose the 
   "Custom" option. Install only the Navigator and Eudora Light Email but not 
   the TCP/IP stack, otherwise you might encounter problems.

If you have Microsoft Office Manager running, you must close it prior to 
installing Netscape Navigator Personal Edition. If you don't close this before 
installing, you might get an error message stating that either compobj.dll 
or ctl3dv2.dll is being used by another application.  The MS Office toolbar,
an indication that MS office is running, is normally located on the top 
right corner of your Program Manager's window.

After installing Netscape Navigator Personal Edition, you will need to run 
the Registration Wizard application to register the product, configure your 
modem, and choose an Internet Service Provider.  To run the Registration 
Wizard, double-click the Program Manager item called "Registration Wizard" 
in the "Netscape Personal Edition" program group. Click the "User Information"
button, and then provide the appropriate information.

When configuring your modem, let the Modem Setup automatically detect your 
modem type and COM port. If the Modem Setup can't determine your modem type,
you'll need to specify the information by choosing your modem from the
modem list. If your modem isn't listed, choose Hayes-compatible as the
modem type to use during registration.  If this fails, call us at (503)
626-5475.

After both the user information and the modem have been setup, click the 
"Service Provider" button to choose your Internet Service Provider. 

===========================================================================
    3. Win32s
===========================================================================
If you are running Win32s version 1.15 or below, you must either upgrade
to version 1.20 or remove Win32s before you can install the Netscape 
Navigator Personal Edition.

To determine which version of Win32s you have, use one of two methods:

1.   Check the WIN32S.INI file in your Windows\system directory

2.   If you are running Windows for Workgroups, start File Manager and
     select the WIN32S16.DLL file from the Windows system directory.
     Choose File|Properties from the menu. The Version line contains the
     major version and the build number for Win32s.

Warning: IF YOU REMOVE WIN32S, YOU WILL NO LONGER BE ABLE TO RUN APPLICATIONS 
THAT REQUIRE WIN32S.

To remove Win32s, do the following:

1. Remove the following line from the [386Enh] section in the SYSTEM.INI
   file:

   device=<WINDOWS>\<SYSTEM>\win32s\w32s.386

   where <WINDOWS> and <SYSTEM> are the lcoations of the Windows and System
   directories, respectively.

2. Remove winmm16.dll from the following line in the [BOOT] section of
   the SYSTEM.INI file:

      drivers=mmsystem.dll winmm16.dll

   The line should look like this when you are done:

      drivers=mmsystem.dll

3. Delete the following files from the <WINDOWS>\<SYSTEM> subdirectory:

      W32SYS.DLL
      WIN32S16.DLL
      WIN32S.INI

4. Delete all of the files in the <WINDOWS>\<SYSTEM>\WIN32S subdirectory,
   then delete the subdirectory itself.

5. Restart Windows.

To obtain Win32s version 1.20 (Application Note number PW1118) and the files
included with it, download PW1118.EXE, a self-extracting file, from the
Microsoft Software Library (MSL) on the following services:

   - CompuServe
     GO MSL
     Search for PW1118.EXE
     Display results and download
   - Microsoft Download Service (MSDL)
     Dial (206) 936-6735 to connect to MSDL 
     Download PW1118.EXE
   - Internet (anonymous FTP)
     ftp ftp.microsoft.com
     Change to the \SOFTLIB\MSLFILES directory
     Get PW1118.EXE

===========================================================================
    4. Windows for Workgroups with Network
===========================================================================
If you are running Windows for Workgroups and have an existing network
installed, the Netscape Navigator Personal Edition Setup program modifies
the following files:

AUTOEXEC.BAT
 SET SHIVA = c:\netscape\dialer

PROTOCOL.INI
 transport=ntst$hlp, NTST$HLP
 netcard=sdialin$,1,SDIALIN$,1
 lan#=sdialin$,1,ntst$hlp

 [NTST$HLP]
 ..
 ..

 [SDIALIN$]
 ..
 ..

SYSTEM.INI
 [386 Enh]
 device=dial.386
 transport=vntstimd.exe

 [Network Drivers]
 netcard=dialndis.exe
 transport=vtcprmt.exe

 [Network]
 sesstimeout=240

 [Vntstimd]
 Numtcbs=255

=======================================================================
    5. Dial-On Demand
=======================================================================

You can manually use the Dialer to connect to your Internet Service Provider
or when you start Netscape, if you aren't already connected to your Internet
Service Provider, the Dialer automatically starts a connection to your service
provider.

After 5 minutes of inactivity (you can change this setting in the Dialer),
the Dialer hangs up the call. Clicking any link in Netscape will restart the 
Dialer to dial and connect to your service provider.

If the Dialer starts when you start Netscape, then the Dialer will also
automatically hang up the call and quit when you exit Netscape.

With Eudora, the Dialer will only start when you send or check your email. 

===========================================================================
    6. Troubleshooting
===========================================================================
1) If you get this error message "Security error has occurred, security 
   error: XX. You will probably be unable to connect securely to this 
   server. You can try to make an unsecure connection, if you wish.", you 
   will need to update your system date to today's date.

2) When you run the Modem Setup from the Registration Wizard, it checks for
   FIFO in your serial port.  This is because machines without FIFO can't 
   handle high DTE speed, so setup turns the DTE speed down to 9600.

   If you don't want the software to turn down the DTE speed during the 
   Registration Wizard, you can disable this feature by modifying the shivappp.ini
   file before running the wizard.  The shivappp.ini file is located in your
   NETSCAPE\DIALER directory.  Set CheckForFIFO=No in the preferences 
   section in your shivappp.ini file.

3) If you try to autodetect Megahertz PCMCIA modems with certain laptops, 
   you will need to remove the modem and put it back in if the machine hangs
   after you click the Finish button in the Modem Setup.

===========================================================================
    7. Miscellaneous
===========================================================================

OLE 2.02
The Netscape Navigator Person Edition Setup program for Windows 3.1 and 
Windows for Workgroups installs the following OLE2 files into the Windows 
System directory only if 1) there is no existing DLL or 2) if the existing DLL
is older:

    COMPOBJ.DLL         108544          10-10-94
    MFCOLEUI.DLL        146976           1-13-95
    OLE2.DLL            302592          10-10-94
    OLE2.REG             27026          10-10-94
    OLE2CONV.DLL         57328          10-10-94
    OLE2DISP.DLL        164832          10-10-94
    OLE2NLS.DLL         150976          10-10-94
    OLE2PROX.DLL         51712          10-10-94
    STDOLE.TLB            4304          10-10-94
    STORAGE.DLL         157696          10-10-94
    TYPELIB.DLL         177216          10-10-94

