[cabfpub] Ballot 118 - SHA1 Sunset

[Gervase Markham]

On 07/10/14 19:27, Kelvin Yiu wrote:
> 2. Not being able to get new code signing certificates to sign new
> builds of Firefox, or sign Firefox in such a way that the same file
> will work on XP and the latest Windows release.
> 
> Assuming you can workaround the first problem by finding a 1024 bit
> root CA that may or may not meet other security requirements, how
> will you deal with the 2nd problem?

Separate builds for XP SP2 and below?

We can detect XP SP2 (for IE, at least) in JS, and serve a link to the
apppropriate build.

Gerv