[Bug 312536] Re: Stop honoring digital signatures based on MD5 hashes
vantrax at gmail.com
Thu Jan 22 01:50:11 UTC 2009
I agree with Sean McNamara on this one. Implementing a fix for this
other that the suggested Firefox equivalent would be a rash move that
would disable far to many valid services based on a hand crafted attack
that required considerable expertise and hardware.
Until a move is made to the SHA family of hashes by the certifying
authorities there is no practical way to resolve this issue.
Stop honoring digital signatures based on MD5 hashes
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in ubuntu.
More information about the Ubuntu-mozillateam-bugs