In light of recent advances in attacks against the SHA-1 cryptographic function, Mozilla is considering banning digital certificates signed with the algorithm sooner than expected.
The CA/Browser Forum, a group of certificate authorities and browser makers that sets guidelines for the issuance and use of digital certificates, had previously decided that new SHA-1-signed certificates should not be issued after Jan. 1, 2016.
Browser makers have also decided that existing SHA-1 certificates will no longer be trusted in their software starting Jan. 1, 2017, even if they’re technically set to expire after that date.
Read the Full Article: Source – CSO Online
Browsing Privacy: (CSO Online) – Mozilla mulls early cutoff for SHA-1 digital certificates
Leave a Reply
You must be logged in to post a comment.