3 ms·
8 year old issue suddenly getting lots of attention :) https://bugzilla.mozilla.org/show_bug.cgi?id=966856 https://bugzilla.mozilla.org/show_bug.cgi?id=966856
by gbuk2013 5y ago
8 year old issue suddenly getting lots of attention :)
https://bugzilla.mozilla.org/show_bug.cgi?id=966856 https://bugzilla.mozilla.org/show_bug.cgi?id=966856
- zinekeller 5y agoI am not sure who's to blame here. I understand Microsoft's reason here, SHA-1 is not suitable to OCSP requests (because it's a cryptographic-sensitive matter), and SHA-256 hashes for OCSP has been already standadised. On the other hand, there's no signalling that Microsoft, or indeed any PKI/CA operator, to switch to SHA-256 (except for the tenuous case of Microsoft announcing that it'll migrate to SHA-2 for all its cryptographic systems).
- tester34 5y agoI'd say it's on Firefox.