Hi,

> I've submitted a bug id for the MD5/X509 cert collision reported by
> Lenstra, Wang and Weger.
> The PDF files is attached to the bug report.
>
> Using SHA instead of MD5 avoids the collision.
>
> Recommend we only use SHA to sign certs.
>
> any comments?

yes, see RFE 1012849.

Martin



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
OpenCA-Devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to