Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: As sites move to SHA2 encryption, millions face HTTPS lock-out

23 Oct 2015   #1
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 
As sites move to SHA2 encryption, millions face HTTPS lock-out

Quote:
In 2016, tens of millions of people around the world will face trouble accessing some of the most common encrypted websites like Facebook, Google and Gmail, Twitter, and Microsoft sites.

Why? Because their browser or device will be unable to read the new, more secure certificates.

SHA1, the cryptographic hashing algorithm that's been at the heart of the web's security for a decade, will be retired in a little over a year. Some say it could be cracked by the end of the year, essentially making it useless and weakening security for millions of users.

Certificate authorities said they will respond by no longer issuing SHA1 certificates at midnight, January 1 2016, opting instead for SHA2 certificates. SHA2 is a significantly stronger algorithm that will last for many years to come. But there's a problem. A small but sizable portion of the internet's users don't have browsers or devices that are compatible with SHA2.
Quote:
There's no way to tell exactly how many will be affected until it happens, in part because there are no concrete figures on how many people are running old or unsupported browsers or devices.
As sites move to SHA2 encryption, millions face HTTPS lock-out | ZDNet


My System SpecsSystem Spec
.
23 Oct 2015   #2
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

I'm not sure what all the tears about.

Keeping hardware and browsers and other programs to some degree of updated state is and always has been the computing world. Lots of hardware and software gets to old to use. The industry is not going to stop improving just because some can't afford the improvements, or don't want to upgrade.
My System SpecsSystem Spec
23 Oct 2015   #3
jamis

Windows 7 Home Premium 64 bit SP1
 
 

OK, what are the odds that IE, Edge, FF, Chrome, etc. won't update to the new standard by New Years?
My System SpecsSystem Spec
.

23 Oct 2015   #4
Alejandro85

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by jamis View Post
OK, what are the odds that IE, Edge, FF, Chrome, etc. won't update to the new standard by New Years?
That's not the question, browser support has been here for years, but the risk is that users don't upgrade to those versions in time, and those still using very old browsers will be unable to load such sites.

The article seems to be over-pessimistic. Since software that does NOT support SHA2 is very old, reality dictates that most people won't notice anything at all.
Anyone remembers Y2K?
My System SpecsSystem Spec
24 Oct 2015   #5
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Agreed most people will not notice
My System SpecsSystem Spec
24 Oct 2015   #6
jamis

Windows 7 Home Premium 64 bit SP1
 
 

Quote   Quote: Originally Posted by Alejandro85 View Post
Quote   Quote: Originally Posted by jamis View Post
OK, what are the odds that IE, Edge, FF, Chrome, etc. won't update to the new standard by New Years?
Anyone remembers Y2K?
Exactly my thought. I was still working in IT during the Y2K brouhaha and nearly everyone was on top of that one. At least our customers were covered.
My System SpecsSystem Spec
24 Oct 2015   #7
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 

Quote   Quote: Originally Posted by ThrashZone View Post
Agreed most people will not notice
I'm sure it'll be a smooth transition but you'll still see some people having probs since not everyone stays on top of updates. I know this well from dealing with my Wife's family members.
My System SpecsSystem Spec
24 Oct 2015   #8
Alejandro85

Windows 7 Ultimate x64
 
 

Most people don't even notice that SHA2 is ALREADY in use, and almost everyone didn't realized that they were using the upgraded algorithm. If "news" like this article won't have been published, possibly the web would transition entirely to it and no one would ever notice anything.

As a quick example, if you look at the certificate that Google presents:
As sites move to SHA2 encryption, millions face HTTPS lock-out-google.png

Note the highlighted row, clearly saying that the signature algorithm is SHA256. Everyone using Google, YouTube, GMail, GDrive and all those associated servicees already "migrated". Many other sites already have done too, just look at their certificates.


My System SpecsSystem Spec
24 Oct 2015   #9
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

When Y2K happened I just went out drinking. I didn't want to see the world come to a end with a clear head.
My System SpecsSystem Spec
24 Oct 2015   #10
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 

Quote   Quote: Originally Posted by Layback Bear View Post
When Y2K happened I just went out drinking. I didn't want to see the world come to a end with a clear head.
My System SpecsSystem Spec
Reply

 As sites move to SHA2 encryption, millions face HTTPS lock-out




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Next-gen HTTP 2.0 protocol will require HTTPS encryption...
Next-gen HTTP 2.0 protocol will require HTTPS encryption (most of the time) Source A Guy
News
IE 10 won't let you access HTTPS sites
My neighbor just recently restored his Toshiba laptop back to factory settings, the Win7 load when he first bought the laptop. After if finally got all the updates applied, he tried to access one of his banking sites and entered id and password, clicked submit and the page reloaded and cleared out...
Browsers & Mail
https/encryption - server logs
Hey all, Have a very quick question - when you visit a site with "https" in the address bar, it is supposed to be encrypted and as such no one can view your login/password as its not sent as plain text. I've been using my gmail account, and online banking sites etc at work for some time. I...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:00.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App