Shulou(Shulou.com)06/03 Report--

Microsoft announced that it will stop supporting sample analysis of multiple .NET Framework versions, and many novices are not very clear about this. In order to help you solve this problem, the following editor will explain it in detail. People with this need can come and learn. I hope you can get something.

Microsoft announced that several versions of the .NET Framework signed with the traditional, unsafe secure hash algorithm 1 (SHA-1) will be discontinued next year.

According to Jamshed Damkewala, Chief Engineering Manager of .NET, the .NET framework 4.5.2, 4.6 and 4.6.1 will be discontinued after April 26, 2022, when updates including security fixes or technical support will no longer be available for these versions. The only exception is the built-in .NET Framework version 4.6 of Windows 10 Enterprise LTSC 2015, whose support will be extended until October 2025, when the operating system reaches its end point.

In addition, it is recommended that .NET developers migrate their applications to at least version 4.6.2 or later of the .NET Framework by April 26, 2022 to continue to receive security updates and technical support. 4.6.2 and 4.8 are stable versions with good compatibility, and if the application is built using the .NET Framework 4-4.6.1, in most cases, it can continue to run on 4.6.2 and later without the need for recompilation or repositioning.

The reason for this is that these versions are digitally signed using certificates that use the traditional SHA-1 encryption hash algorithm, which has now proved insecure and allows attackers to fake digital certificates to impersonate companies or websites through vulnerabilities in SHA-1. After the Windows updated signature was changed to use the SHA-2 algorithm, the Microsoft download Center removed all Windows-signed SHA-1 content in August 2020. And, starting from May 9 next month, all major Microsoft services and programs (including code signing, file hashing, and TLS certificates) will fully use the SHA-2 algorithm.

However, although Microsoft official content only supports SHA-2 signatures, Windows executables signed with manually installed enterprise integers or self-signed SHA-1 certificates can still run in the operating system.

Is it helpful for you to read the above content? If you want to know more about the relevant knowledge or read more related articles, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.