{"id":443,"date":"2015-10-23T10:57:15","date_gmt":"2015-10-23T10:57:15","guid":{"rendered":"https:\/\/www.sslrenewals.com\/blog\/?p=443"},"modified":"2021-11-25T08:34:41","modified_gmt":"2021-11-25T08:34:41","slug":"vulnerability-risk-in-using-sha1-certificate","status":"publish","type":"post","link":"https:\/\/sslrenewals.com\/blog\/vulnerability-risk-in-using-sha1-certificate","title":{"rendered":"Vulnerability Risk in Using Sha1 Certificate"},"content":{"rendered":"

A Very Popular Hashing Function Sha1 Is No Longer Safe to Use<\/h2>\n

SHA-1 or \u2018Secure Hash Algorithm 1\u2019 is a cryptographic hash function that has been used by certificate authorities to sign SSL certificates. The CA\/B Forum has announced the deprecation of the SHA-1 algorithm in favor of the newer and more secure SHA-2 hashing algorithms.<\/p>\n

What is the Vulnerability Risk of SHA-1 Certificates?<\/strong><\/h3>\n

Most of the most popular Web browser companies have declared that they will not recognize SSL certificates signed using SHA-1 after Jan. 1, 2017. According to researchers, if a malicious attacker applies enough computer power, it is theoretically possible to exploit SHA-1 certificates. This doesn\u2019t mean that websites that are protected by SHA-1 SSL certificates are suddenly unprotected, but it certainly is a wake-up call to strengthen SSL certificates by issuing them using the SHA-2 algorithms.<\/p>\n

SSL Certificate Authorities and vendors recommend that all customers who are still protected by SHA-1 certificates reissue their certificates using the SHA-2 hashing algorithm to avoid web browser security warnings and to ensure to visitors their site is not blocked or become concerned about browser security warnings related to SHA-1 certificates.<\/p>\n

Action Required to Decrease The SHA-1 Vulnerability Risk: <\/strong>SHA-1 certificates will not be recognized starting in 2016, a change that requires the customer\u2019s attention and action. SSLRenewals<\/strong> advice is to reissue or replace the SHA-1 Certificate with SHA-2 certificates as soon as possible.<\/p>\n

Issue or reissue your SHA-2 updated SSL Certificate from the following resources:<\/em><\/p>\n

CA\/Browser Forum notice about SHA-1
<\/a>For Symantec certificates click on this link – INFO2848
<\/a>For GeoTrust certificates click on this link –INFO2851
<\/a>For Thawte certificates click on this link –INFO2849<\/a><\/p>\n

\n

Renew your SSL certificate now and recover up to 78% of the total cost<\/h2>\n

Check if your SSL certificate still deploys SHA-1 function, if yes, then it’s time to renew it for better security features.<\/p>\n

Upgrade my SSL Today!<\/a><\/p>\n<\/div>\n\n\n

Related Post:<\/strong><\/p>\n\n\n\n