I agree that the original article should be updated. The delay seems to be due t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

vtlynch on April 7, 2015 | parent | context | favorite | on: Next Chrome Update Will Block SHA-1 Certificates

I agree that the original article should be updated. The delay seems to be due to some "late-breaking chain building bugs": https://twitter.com/sleevi_/status/585429689646260224

This older Twitter thread kinda alludes to some problems with CAs being compliant in time: https://twitter.com/sleevi_/status/584010058897293313

(Ryan Sleevi works on PKI for Chromium)

yuhong on April 7, 2015 [–]

Background: CAs often provide cross certificates signed with SHA1 to older roots for browsers that don't have the newer roots installed.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact