SHA-1 Deprecation: No Browser Left Behind
Dec 9, 2015Matthew Prince
Summary
This post details Cloudflare's proactive approach to deprecating the SHA-1 hashing algorithm for SSL certificates. It highlights the security risks associated with SHA-1, the challenges of transitioning to SHA-2 (particularly for users in developing countries with older devices), and Cloudflare's solution: implementing SHA-1 fallback for legacy browsers while serving SHA-256 to modern ones. This demonstrates a commitment to both advancing security standards and ensuring broad accessibility.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack