3 ms·
> So why sacrifice compatibility for no improvement. No improvement? How about improvement in security?
by avz 12y ago
> So why sacrifice compatibility for no improvement.
No improvement? How about improvement in security?
- mike_hearn 12y agoThe reality is most people running websites that use SSL are not security experts and cannot evaluate the weakness of SHA1 vs SHA2. So they trust the defaults, which are SHA1 (in e.g. openssl). Their goal is to get the padlock, not to achieve some other notion of security.