Sign in / up

back to article Mozilla strangling SHA-1

One does not simply turn off a once-ubiquitous part of the Internet's infrastructure, but Mozilla's taken another step towards eliminating the SHA-1 hash. Its latest move in the incremental deprecation of the long-since-cracked SHA-1 is outlined here. Early next year, any time Firefox sees an SHA-1 certificate chaining to a …

COMMENTS

Post your comment
House rules Send corrections
Add to 'My topics' unstar *
  1. Nate Amsden

    untrusted click through

    Is great. Now if you even think about going further than that and block it entirely then well fuck you again Mozilla.

    So tired of having to deal with Firefox thinking it's trying to protect me because someone might try a MITM attack between my vpn connected computer and an smart PDU running old SSL.(that will never see another software update)

    Have no problem with click through like a self signed cert though.

    4 9 Reply
    1. Dan 55 Silver badge
      Reply Icon

      Re: untrusted click through

      And how do you expect Firefox to tell the difference between a MITM attack and your VPN connection to a smart PDU running old SSL? If we're supposed to accommodate ancient devices then we'd still be using MD5 certs.

      4 0 Reply
      1. allthecoolshortnamesweretaken
        Reply Icon

        Re: untrusted click through

        "And how do you expect Firefox to tell the difference between a MITM attack and your VPN connection to a smart PDU running old SSL?"

        Um... magic?

        *raises wand* "Detecto Middleman!"

        7 0 Reply
    2. Hans 1
      Reply Icon

      Re: untrusted click through

      Import the cert, no click through, even ... beware, SHA-1 will be removed one day or the other ... from all main browsers. You can still get any old portable firefox and run that alongside just for your PDU, note, also, that it is wiser to do so ;-) Easy!

      1 0 Reply
    3. Anonymous Coward
      Reply Icon
      Anonymous Coward

      Re: untrusted click through

      "Nate has a VPN and he's not afraid to tell us" (again, and again and again)

      0 0 Reply

POST COMMENT House rules

Not a member of The Register? Create a new account here.

Forgotten password ?

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon