3 ms·
I feel a bit uneasy with having the "unsafe" when SHA1 is technically still safe - just not as safe as, say, sha256 (which is itself probably not as safe as sha
by zobzu 12y ago
I feel a bit uneasy with having the "unsafe" when SHA1 is technically still safe - just not as safe as, say, sha256 (which is itself probably not as safe as sha512, etc.). It would be nice to have a better "marker" for it instead of having a very fast deprecation rate.
- rakoo 12y ago> SHA1 is technically still safe The linked article to Schneier's blog shows that practical attacks can be afforded as soon as 2018. It's absolutely not safe anymore, at least for that usage.
- fryguy 12y agoMany uses for hashing algorithms don't care about collision resistance (HMAC/passwords). Signatures/Certificates are not one of those things.