Bug#826536: clarify SHA-1 support beyond 2016

2016-06-07 Thread Stefan Fritsch
On Monday 06 June 2016 08:24:50, Daniel Pocock wrote: > CAs, browser vendors and other software developers are actively > disabling SHA-1 support and shifting to the SHA-2 (SHA-256) digest > algorithm. There are two relevant uses of SHA-1 that I know of. As MAC algorithm in the TLS cipher suite.

Bug#826536: clarify SHA-1 support beyond 2016

2016-06-05 Thread Daniel Pocock
Package: apache2 Version: 2.4.10-10+deb8u4 Severity: important CAs, browser vendors and other software developers are actively disabling SHA-1 support and shifting to the SHA-2 (SHA-256) digest algorithm. How will Apache web server deal with this? If not following upstream, how will it be done i