3 ms·
Do I understand correctly, when Mozilla says: In early 2017, Firefox will show an overridable “Untrusted Connection” error whenever a SHA-1 certificate is enco
by ptaipale 10y ago
Do I understand correctly, when Mozilla says:
In early 2017, Firefox will show an overridable “Untrusted Connection” error whenever a SHA-1 certificate is encountered that chains up to a root certificate included in Mozilla’s CA Certificate Program. SHA-1 certificates that chain up to a manually-imported root certificate, as specified by the user, will continue to be supported by default; this will continue allowing certain enterprise root use cases, though we strongly encourage everyone to migrate away from SHA-1 as quickly as possible.
This means that self-signed certificates, approved as an exception in browser, will continue to work because they are do not chain up to a root certificate included in Mozilla’s CA Certificate Program? I.e. if user has confirmed an exception for self-signed certificate, it is not impacted by this change in Mozilla?
- kevincox 10y agoThe signature on a self signed certificate doesn't matter as the certificate itself is trusted. However if you add your own CA then yes, I believe it will continue to work for the near future. (You should be moving away anyways though ;) )