4 ms·
Except that SHA-1 is strong enough to protect against MITM and will be for the immediately foreseeable future. Well-financed attackers could probably achieve a
by makomk 10y ago
Except that SHA-1 is strong enough to protect against MITM and will be for the immediately foreseeable future. Well-financed attackers could probably achieve a collision but that doesn't get you very far these days.
- jrochkind1 10y agoThen you disagree with the browser vendors decision to gradually remove support/warn for SHA-1 entirely? They seem to disagree with you.
- user5994461 10y agoSHA1 is perfectly fine. Warning: The above sentence may not be right in 5-10 years so they are starting to shut it down now. I personally find the schedule rather aggressive. Stop issuing certs this year, block it next year. What's the average cert lifetime? 1-2-3 years? This is gonna give some warnings.
- spydum 10y agoSHA1 may not be defeated yet, but since it has been found weak, we would be foolish to continue using it. It does us little good to wait until it's actually broken. Especially since we have sha2 as a sufficient replacement.
- makomk 10y agoSHA-1 still isn't practical to exploit right now. Conditioning users to automatically click through SSL warnings, on the other hand, can be trivially exploited.