back to article Mozilla strangling SHA-1

One does not simply turn off a once-ubiquitous part of the Internet's infrastructure, but Mozilla's taken another step towards eliminating the SHA-1 hash. Its latest move in the incremental deprecation of the long-since-cracked SHA-1 is outlined here. Early next year, any time Firefox sees an SHA-1 certificate chaining to a …

  1. Nate Amsden

    untrusted click through

    Is great. Now if you even think about going further than that and block it entirely then well fuck you again Mozilla.

    So tired of having to deal with Firefox thinking it's trying to protect me because someone might try a MITM attack between my vpn connected computer and an smart PDU running old SSL.(that will never see another software update)

    Have no problem with click through like a self signed cert though.

    1. Dan 55 Silver badge

      Re: untrusted click through

      And how do you expect Firefox to tell the difference between a MITM attack and your VPN connection to a smart PDU running old SSL? If we're supposed to accommodate ancient devices then we'd still be using MD5 certs.

      1. allthecoolshortnamesweretaken

        Re: untrusted click through

        "And how do you expect Firefox to tell the difference between a MITM attack and your VPN connection to a smart PDU running old SSL?"

        Um... magic?

        *raises wand* "Detecto Middleman!"

    2. Hans 1

      Re: untrusted click through

      Import the cert, no click through, even ... beware, SHA-1 will be removed one day or the other ... from all main browsers. You can still get any old portable firefox and run that alongside just for your PDU, note, also, that it is wiser to do so ;-) Easy!

    3. Anonymous Coward
      Anonymous Coward

      Re: untrusted click through

      "Nate has a VPN and he's not afraid to tell us" (again, and again and again)

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2021