3 ms·
Beyond the expiry fact, I think google does pinning for their certs. If you pin your certs you don't really care a lot whether the ca is compromised, and here i
by alanfranzoni 12y ago
Beyond the expiry fact, I think google does pinning for their certs. If you pin your certs you don't really care a lot whether the ca is compromised, and here it's just the ca that's got sha1 signing, not the actual cert which is sha2.
- riking 12y agoNo, the *.google.com cert has SHA-1. It's just that it expires before 2016, as they get issued for 3 months.
- alanfranzoni 12y agoYou're right. I must have imagined the SHA-256 part.