3 ms·
SHA1 may not be defeated yet, but since it has been found weak, we would be foolish to continue using it. It does us little good to wait until it's actually bro
by spydum 10y ago
SHA1 may not be defeated yet, but since it has been found weak, we would be foolish to continue using it. It does us little good to wait until it's actually broken. Especially since we have sha2 as a sufficient replacement.
- makomk 10y agoSHA-1 still isn't practical to exploit right now. Conditioning users to automatically click through SSL warnings, on the other hand, can be trivially exploited.