[cabfpub] Ballot 118 - SHA1 Sunset
gerv at mozilla.org
Wed Oct 29 09:02:19 MST 2014
On 28/10/14 17:49, kirk_hall at trendmicro.com wrote:
> 1. Will CRLs with a SHA-1 signature be rejected or receive a negative
> browser UI in Chrome in _2016_? (Same question for Firefox and Microsoft.)
Firefox does not check CRLs.
> 2. Will OCSP responses with a SHA-1 signature be rejected or receive a
> negative browser UI in Chrome in _2016_? (Same question for Firefox and
I very much doubt it. I can't speak definitively as I'm not writing the
code, but Ryan's logic makes sense to me.
More information about the Public