5 ms·
Seems like the SSL certificates that CloudFlare automatically generates for sites are SHA-1 signed. Anyone know if they're planning to upgrade to SHA-2?
by kilovoltaire 12y ago
Seems like the SSL certificates that CloudFlare automatically generates for sites are SHA-1 signed.
Anyone know if they're planning to upgrade to SHA-2?
- konklone 12y agoThey can be seen in the Chrome discussion thread, complaining to Google that the timeline is too aggressive. But they're a good company, and I imagine they'll update as soon as they can.
- kilovoltaire 12y agoAh interesting, thanks. (For anyone else, here's the link: https://groups.google.com/a/chromium.org/d/msg/blink-dev/2-R4XziFc7A/cLDiqrrnkPkJ https://groups.google.com/a/chromium.org/d/msg/blink-dev/2-R...)
- tptacek 12y agoThis is a great thread. Thanks for posting it.
- jgrahamc 12y agoWe are going to do the following: 1. Reissue our SHA-1 based certs to meet the deadlines specified by Chrome so that no customer sees a warning in Chrome. 2. In the future, we will also have an automatic fallback system so that for poor clients (that only support SHA-1) we are able to dynamically provide 'old' certificates. For up to date clients we will not use SHA-1 at all.