4 ms·
That's an especially pedantic correction, as it does not impact the meaning of the statement. s/the weak SHA-1 encryption/the weakened SHA-1 hash used to verif
by rictic 12y ago
That's an especially pedantic correction, as it does not impact the meaning of the statement.
s/the weak SHA-1 encryption/the weakened SHA-1 hash used to verify the certificate that's used to authenticate the encrypted connection/
- tptacek 12y agoIt is, you're right. It's a hobbyhorse of mine, though, because SHA1 (and MD5) appear in TLS ciphersuites as MAC components, and those uses are not known to be vulnerable at all.