3 ms·
Windows XP SP 2 (SP 3 is fine) and early Android, I believe, are the clients that don't support certs later than SHA-1.
by cbhl 12y ago
Windows XP SP 2 (SP 3 is fine) and early Android, I believe, are the clients that don't support certs later than SHA-1.
- Someone1234 12y agoThere are also other (mostly unsupported) mobile devices which don't. Like old ebook readers which have browsers for some reason.
- drdaeman 12y agoJust curious — does X.509 support multiple signatures, so both SHA-1 and SHA-2-based sigs could be included, one for legacy user-agents and one for modern ones?
- cwyers 12y agoIt has to be so frustrating to Google that the people responsible for Android make it so hard for users to upgrade to versions that support SHA-2.
- GeneralMayhem 12y agoIt's not Google's fault the telecoms cripple every phone they sell.
- teddyh 12y agoWell, Google knew it would happen, and allowed them to do it.