Stories
Slash Boxes
Comments

SoylentNews is people

posted by mrpg on Saturday May 13 2017, @07:27AM   Printer-friendly
from the c80eab5af3a3b8ab69c0e3a3d444540f2d740c76 dept.

Submitted via IRC for TheMightyBuzzard

"Beginning May 9, 2017, Microsoft released updates to Microsoft Edge and Internet Explorer 11 to block sites that are protected with a SHA-1 certificate from loading and to display an invalid certificate warning," the company announced.

The change, however, impacts only SHA-1 certificates that chain to a root in the Microsoft Trusted Root Program where the end-entity certificate or the issuing intermediate uses SHA-1. This means that enterprises or self-signed SHA-1 certificates won't be affected by this. They are, however, encouraged to migrate to SHA-2 based certificates as fast as possible.

"Microsoft recommends that all customers migrate to SHA-2, and the use of SHA-1 as a hashing algorithm for signing purposes is discouraged and is no longer a best practice. The root cause of the problem is a known weakness of the SHA-1 hashing algorithm that exposes it to collision attacks. Such attacks could allow an attacker to generate additional certificates that have the same digital signature as an original," the company notes.

Source: Microsoft Kills SHA-1 Support in Edge, Internet Explorer 11


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by The Mighty Buzzard on Saturday May 13 2017, @01:29PM (5 children)

    Is there money to pay the ransom?

    --
    My rights don't end where your fear begins.
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by c0lo on Saturday May 13 2017, @02:53PM (4 children)

    by c0lo (156) Subscriber Badge on Saturday May 13 2017, @02:53PM (#509169) Journal

    Funny enough.], it seems like paying the ransom once is cheaper in this case.
    That is... if you don't take into account the cost of the chaos; but who in her/his full mind would look into those costs? The path to freedom (or death) is capitalism, and everybody knows the capitalism is about privatizing the profit and socializing the cost/risk.

    --
    https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford