This project is not maintained anymore. You can still view and search the archives.

The end of SHA-1 on the Public Web | Mozilla Security Blog

Hi, I’m Anselm Hannemann, a freelance Frontend Developer and Engineering Manager. You can hire me. I wrote WDRL for 10 years and have a a Market Garden as a side-business.

This link appeared in WDRL 171 on 24.02.2017.

The end of SHA-1 on the Public Web | Mozilla Security Blog

It was just a matter of time until browsers would stop accepting SHA-1 certificates. But this week, things took a sudden turn as Google researchers revealed the first practical collision for SHA-1, affirming the insecurity of the algorithm. As a result of this, starting from today, Mozilla will remote-update Firefox to not accept SHA-1 in certificates anymore.