Announcing the first SHA-1 collision

Re:Announcing the first SHA-1 collision by goncalomb on Thursday February 23, 2017 @11:50AM (#13715338)

https://security.googleblog.com : "This website uses a weak security configuration (SHA-1 signatures), so your connection may not be private."

[ Parent | on HN ]

Re:Announcing the first SHA-1 collision by pfg on Thursday February 23, 2017 @12:20PM (#13715643)

I get a SHA256 certificate for that site. What user agent are you using? Is there some kind of middlebox on your network, or do you use AV software that intercepts TLS connections?

[ Parent | on HN ]

Re:Announcing the first SHA-1 collision by goncalomb on Thursday February 23, 2017 @12:40PM (#13715835)

Fair enough, I was using Chrome "Version 50.0.2661.102 (64-bit)" on Linux Mint. I have updated it to 56.0.2924.87, now I'm getting a full error page "Your connection is not private" NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM. I need to search for this issue now.

No I'm not using anything that intercepts TLS connections.

EDIT: It's fixed now, `sudo apt-get install libnss3-1d`.

http://askubuntu.com/questions/880695/neterr-cert-weak-signa...

[ Parent | on HN ]