Slashdot Mirror

← Back to Stories (view on slashdot.org)

SHA-1 Cutoff Could Block Millions of Users From Encrypted Websites (csoonline.com)

Posted by Soulskill on from the privacy-versus-convenience dept.

itwbennett writes: As previously reported on Slashdot, browser makers are considering an accelerated retirement of the older and increasingly vulnerable SHA-1 function. But Facebook and CloudFlare are warning some 37 million users of old browsers and operating systems that don't support SHA-2 will be left without access to encrypted websites. The majority of them are located in some of the "poorest, most repressive, and most war-torn countries in the world," CloudFlare's CEO Matthew Prince said Wednesday in a blog post. Facebook has solved this problem by building a mechanism that allows its certificates to be switched automatically based on the browser used by the visitor.

4 of 146 comments (clear)

  1. Think of all the Oracle users? by mveloso · · Score: 4, Funny

    Some of the older Oracle products only support SHA-1. Upgrading to a newer version or Oracle will cost them millions. Won't someone think of the Oracle user base?

  2. Free Oracle upgrades available everywhere by Anonymous Coward · · Score: 2, Funny

    Some of the older Oracle products only support SHA-1. Upgrading to a newer version or Oracle will cost them millions. Won't someone think of the Oracle user base?

    Nonsense. Postgres is free.

  3. This is nonsensical fear mongering by Anonymous Coward · · Score: 2, Funny

    I have one of these old browsers, and I'm not being cut off of the we

  4. Re: Pretty sure... by Anonymous Coward · · Score: 2, Funny

    When you can't access most websites because your browser only supports SHA-1, you may find you have a lot of capacity left on your monthly limit...