4 ms·
Not a security expert here but it seem like akamai should also be required to use a root CA that does not use md5 for it's encryption. It am under the impressi
by davorak 15y ago
Not a security expert here but it seem like akamai should also be required to use a root CA that does not use md5 for it's encryption. It am under the impression that md5 based encryption has been broken since 2008:
http://www.win.tue.nl/hashclash/rogue-ca/#sec71 http://www.win.tue.nl/hashclash/rogue-ca/#sec71
- ordinary 15y agoMD5 is not an encryption algorithm. It is a hashing algorithm. You're right though, it is broken.
- Dylan16807 15y agoThe authentication is based on encrypting said hash, so I would say that md5-based is good enough as a description.