Sam Morris <[email protected]> writes:

> Maybe in a few years, NSS will have disabled the use of MD5 and the 
> ancient MD2 algorithm. I wonder how many other insecure algorithms are 
> still lurking in NSS, OpenSSL, GNU TLS, Java, etc...

In GnuTLS, we decided in 2005 that certificate signatures with MD5
should be rejected because MD5 was not a good hash function any more.

/Simon


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to