Re: The SHA1 sunset

[James Cloos]

>>>>> "LMI" == Lars Magne Ingebrigtsen <address@hidden> writes:

LMI> Other browser makers have announced their intention to refuse to make
LMI> any TLS connection using SHA1-signed certificates on January 1st, but
LMI> I'm not sure whether they actually went through with this?

No, they are rejecting and cert which uses sha1 and claims to have been
issued after 2016-01-01T00:00:00.

The latter part is important.

The commercial CAs have agreed not to issue any sha1 certs starting on
that date, so the refusal does not affect anything using mainstream
commercial certs.

So the browser vendors are not doing anything of actual value, just
engaging in some theatre.

-JimC
-- 
James Cloos <address@hidden>         OpenPGP: 0x997A9F17ED7DAEA6