What is the process for verifying the hash function that was used to create a web applications certificate? I ask because there apparently has been some issue with the MD5 hash function wherein someone malicious can fake a certificate.
Tell me more
×
Web Applications Stack Exchange is a question and answer site for
power users of web applications. It's 100% free, no registration required.
|
|
FireFox 3 has all MD5 encryption disabled by default except for RC4/128 (filter about:config by md5) Lots more info here: The new MD5/SSL exploit is NOT the end of civilization as we know it |
||||
|
|