4 ms·
Anybody know what the easiest way to determine if your certificate is affected? I looked at my certificate and it says Signature Algorithm is "SHA-1 with RSA E
by soccerdave 12y ago
Anybody know what the easiest way to determine if your certificate is affected? I looked at my certificate and it says Signature Algorithm is "SHA-1 with RSA Encryption". Is this affected? When I viewed the certificate for google.com it also said "SHA-1 with RSA Encryption".
- eastdakota 12y agoYes. Both those certificates are affected. If I had to guess, Google will begin issuing a non-SHA1 cert to modern browser users and a SHA1 certificate to older browsers before the end of September. I wish I could give you easy advice on how to do that yourself.
- soccerdave 12y agoThanks for the reply, I thought I was understanding it correctly. Now that I think about it more, they will still be able to use SHA-1 and not be affected because they will surely just issue another certificate that only lasts 1 year which means it will expire before January 2016, so it will still show up as Green in Chrome. Sucks for me because we paid for a cert through July 2017 and now we'll probably have to pay more money to get a non-SHA1 cert.
- rstupek 12y agoyour CA should offer you free re-issuing any time you want to regenerate it
- tbrownaw 12y agoHow? I would expect anything that might identify the browser would be sent after the encryption was set up?
- bzbarsky 12y agoThe list of supported cyphersuites is sent before the encryption is set up. Though some browsers lie in that list and list things they don't actually support, of course...