The current 2015 and 2016 future years can be called technological revolution. Microsoft , Mozilla and now Google removed certificates for the signature of network resources with the SHA-1 hash.
Earlier it was planned that the support of these certificates will be discontinued 1 January 2017, but now the company has revised its plans. This will occur July 1, 2016, ie six months earlier.
The reason for this was the increase in computing power and, consequently, the potential emergence of opportunities for the creation of fictitious certificates already in 2018. Meanwhile on Facebook believe that refusal to support the SHA-1 can leave unencrypted many users because 7% of browsers do not support the new encryption algorithm SHA256, which can replace the SHA-1. This is especially true for mobile browsers.
A similar opinion is shared by CloudFlare company . They think that spending several thousand dollars on the selection of SHA-1 collision - a lesser evil compared with the rejection of this type of hashing in principle. Alternatively, solutions experts Facebook and CloudFlare offer allow the installation HTTPS-connections with the use of certificates based on the SHA-1, but only on condition that the client browser does not support SHA256 or more robust hash function. Related Products :
|