Code Monkey home page Code Monkey logo

Comments (6)

april avatar april commented on May 9, 2024

Looks like it was just a Chrome bug:

https://code.google.com/p/chromium/issues/detail?id=483874&thanks=483874&ts=1430613035

But I still think the SHA-1 site should specifically note 2015/2016/2017.

from badssl.com.

lgarron avatar lgarron commented on May 9, 2024

sha1.badssl.com uses a cert expiring in 2016. ;-)

It originally looked like I'd be able to get a SHA-1 cert expiring in 2017 easily. The plan was to use sha1-2016.badssl.com and sha1-2017.badssl.com explicitly, and to redirect sha1.badssl.com to one of them.

sha1.badssl.com has been in a "temporary" state that's been waiting on someone at Comodo for a few weeks now. ;-)

Until we're sure we'll have a 2017 cert (I'll believe it when I have it in hand), I think the best is to add an informational message to sha1.badssl.com (similar to preloaded-hsts.badssl.com). Eventually, I'd like all the domains to explain their purpose, anyhow.

Looks like it was just a Chrome bug:

Yeah, I had a fun day where I was debugging the SHA-1 warning, and couldn't tell if it was caused by Finch. :-/

from badssl.com.

april avatar april commented on May 9, 2024

As I was the one who submitted that Chrome bug, I truly hope I didn't create an entire days worth of work for you. >_<

Also, April Corporation Certificate Authority is issuing 2017 SHA-1 certificates at this very moment. Just send them a crisp new $500 bill and they'll sign whatever you want. grins

from badssl.com.

lgarron avatar lgarron commented on May 9, 2024

As I was the one who submitted that Chrome bug, I truly hope I didn't create an entire days worth of work for you. >_<

Nah, that was here.
Thanks for filing a bug, though. In this case, your behaviour was unexpected, and it's usually good to file a bug for that.

Also, April Corporation Certificate Authority is issuing 2017 SHA-1 certificates at this very moment. Just send them a crisp new $500 bill and they'll sign whatever you want. grins

ACCA sounds like a cool Swedish parody rock band. I like to get my certs from SSCA ("Super-Secure Certificate Authority"). :-P

(Also, $500 bills have been out of print for 80 years?)

from badssl.com.

april avatar april commented on May 9, 2024

(Also, $500 bills have been out of print for 80 years?)

That's why they only want crisp new ones! :D

from badssl.com.

lgarron avatar lgarron commented on May 9, 2024

I think we're good as of 398d17a.

from badssl.com.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.