[cabfpub] SHA-1 changes and certificate lifetimes

[Steve Roylance]

Hi Gerv,

That¹s great.  

Thanks.


Steve

On 19/11/2013 14:38, "Gervase Markham" <gerv at mozilla.org> wrote:

>On 16/11/13 10:48, Steve Roylance wrote:
>> Mac OSX 1.5 was the first version to support SHA256, but what is the
>>%age
>> of previous versions still in use?  1%, 0.1%, 0.01% etc   In fact do you
>> have something similar to this on Android adoption that all CAs can use
>>to
>> assure their subscribers that relying party issues will be minor?
>> http://en.wikipedia.org/wiki/Android_version_history
>
>SHA-256 support was first added to NSS version 3.8, which was released
>on 10th April 2003[0]. The map of NSS version to Firefox versions[1]
>doesn't even go back that far. However, looking at the Firefox release
>history on Wikipedia[2], I'd guess that probably Firebird 0.7, released
>in October of 2003, may have been the first to have that NSS version.
>Anything called Firefox will support SHA-256.
>
>Hope that helps,
>
>Gerv
>
>[0] http://www-archive.mozilla.org/projects/security/pki/nss/
>[1] https://wiki.mozilla.org/NSS:Versions
>[2] http://en.wikipedia.org/wiki/Firefox_release_history