2

According to this article: http://googleonlinesecurity.blogspot.co.uk/2014/09/gradually-sunsetting-sha-1.html

SHA1 in SSL certificates will start reporting SSL errors to chrome browsers fairly soon. If SHA1 is still a part of your SSL chain, what expiration date range will continue to be error free for a certificate after the chrome SHA1 updates are fully released?

Improve this question
1
  • All web browsers have announced to quit their support for SHA-1 encrypted website. But I've found many website such as Google, Facebook, LinkedIn are encrypted with old and less secured SHA-1 algorithm. Now I have question in my mind whether migration from SHA-1 to SHA-2 is required or not... shachecker.com/check/Facebook.com
    – Jim Walker
    Commented Oct 29, 2014 at 12:58

1 Answer 1

Reset to default
2

If I understand correctly, the phaseout is based on the post-2016 expiration date of the SHA-1. This mostly deals with certs that have been registered for a period beyond 2015. According to the way they are wording this, certs expiring in 2014/2015 should be ok and won't flag warning. According to Digicert:

  • November 2014 - SHA-1 SSL Certificates expiring any time in 2017 will show a warning in Chrome.
  • December 2014 - SHA-1 SSL Certificates expiring after June 1, 2016 will show a warning in Chrome.
  • January 2015 - SHA-1 SSL Certificates expiring any time in 2016 will show a warning in Chrome.

More info from: Digicert | GlobalSign | This Dude

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.