[tor-bugs] #18042 [Tor Browser]: Make sure certificates signed with SHA-1 are not accepted anymore in ESR 45

Wed Jan 20 21:23:00 UTC 2016

#18042: Make sure certificates signed with SHA-1 are not accepted anymore in ESR 45
------------------------------------+--------------------------
 Reporter:  gk                      |          Owner:  tbb-team
     Type:  task                    |         Status:  new
 Priority:  High                    |      Milestone:
Component:  Tor Browser             |        Version:
 Severity:  Major                   |     Resolution:
 Keywords:  tbb-security, ff45-esr  |  Actual Points:
Parent ID:                          |         Points:
  Sponsor:                          |
------------------------------------+--------------------------

Comment (by bugzilla):

 Seems that Mozilla is planning to do it as you want - in their 45.0esr.
 (status-firefox-esr45:  affected)
 But comment https://bugzilla.mozilla.org/show_bug.cgi?id=942515#c56
 greatly demonstrates that situation with SHA-1 is far from seamless
 resolution.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18042#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online