12 ms·
It's one of the links early in the story. (It's pretty link heavy, so it can be hard to miss. 6th link in). Basically, by 2015, Google will update Chrome to sh
by squeaky-clean 12y ago
It's one of the links early in the story. (It's pretty link heavy, so it can be hard to miss. 6th link in).
Basically, by 2015, Google will update Chrome to show websites with HTTPS certificates using SHA-1 as "insecure." The level of insecurity shown will get more severe over time, as well as being based on when your certificate expires. Here is the full link for details:
http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html http://googleonlinesecurity.blogspot.com/2014/09/gradually-s...
- raldi 12y agoThat's What. The headline hints at Why, but never delivers.
- squeaky-clean 12y agoThis entire article is about Why. Read the "An attack on SHA-1 feels plenty viable to me" section for the most info.
- raldi 12y agoI see -- it's not announcing any news, or any new theories; it's just a roundup of last week's news.
- gbhn 12y agoYes. Much like last week's news was. :-)
- konklone 12y agoIt's a roundup of last week's news, and (hopefully) better all-around explanation and background for people with less technical knowledge. It also points people to another tool I made, https://shaaaaaaaaaaaaa.com https://shaaaaaaaaaaaaa.com, to actually do the SHA-1 check.