Shulou(Shulou.com)06/01 Report--

As the sha1 signature algorithm has entered the phase of elimination and is gradually being abandoned, it is a general trend to upgrade sha1 to sha2.

Microsoft has officially released its sha1 abandonment strategy: http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx

It wasn't long before Google released sha1's sunset plan: http://blog.chromium.org/2014/09/gradually-sunsetting-sha-1.html.

Let's focus on a few important days:

September 2014, chrome will give an alarm to sha1 certificates that have not expired after 2017

Chrome gives an alarm to sha1 certificates that expire after June 1, 2014.

In February 2015, any sha1 certificate that is still valid after 2016 will be alerted by chrome.

In January 2016, Microsoft will not trust sha1 code signatures without timestamps.

In January 2017, both Microsoft and Mozilla will no longer trust sha1's ssl certificate.

For the upgrade strategy of sha2, we make the following plan:

In December 2014, the sha2 certificate is issued by default, during which time, if it is not a certificate that is still in force before 2017, you can choose to reissue the sha1 certificate. No more sha1 certificates will be issued after January 1, 2016

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.