[cabfpub] Ballot 118 - SHA1 Sunset

Gervase Markham gerv at mozilla.org
Wed Oct 8 10:48:31 UTC 2014

On 07/10/14 19:27, Kelvin Yiu wrote:
> 2. Not being able to get new code signing certificates to sign new
> builds of Firefox, or sign Firefox in such a way that the same file
> will work on XP and the latest Windows release.
> Assuming you can workaround the first problem by finding a 1024 bit
> root CA that may or may not meet other security requirements, how
> will you deal with the 2nd problem?

Separate builds for XP SP2 and below?

We can detect XP SP2 (for IE, at least) in JS, and serve a link to the
apppropriate build.


More information about the Public mailing list