Facebook security warning over expiring algorithm

Facebook security warning over expiring algorithm

The algorithm, known as SHA-1, will stop being supported by web browsing programs during 2016.

Its replacement - SHA-2 - will not be compatible with older web browsers.

Facebook said many of those exposed when SHA-1 is retired live in regions where web use is closely watched.

"We don't think it's right to cut tens of millions of people off from the benefits of the encrypted internet," wrote Alex Stamos, Facebook's chief security officer in a blogpost.

Two-tier web

Statistics gathered by Facebook suggest that 3-7% of all web browsers are so old that they cannot use SHA-2.

SHA-1 is used in a lot of security measures as a guarantee of identity and to conceal what people do online. But the cost of mounting an attack has fallen sharply recently so it has become much more straightforward for attackers to impersonate websites and spy on data.

Security firm Cloudflare has also issued warnings about the retirement of SHA-1 and drawn up a list of the nations where older browsers that cannot work with the new version are most prominent.

"Unfortunately, this list largely overlaps with lists of the poorest, most repressive, and most war-torn countries in the world," said Matthew Prince, co-founder of Cloudflare in a blogpost.

"In other words, after 31 December most of the encrypted web will be cut off from the most vulnerable populations of internet users who need encryption the most," he said.

Both Facebook and Cloudflare have called for changes to the way that web browsers handle SHA-1 once it is retired. The proposal would mean SHA-1 would still be used for those using a browser that cannot use the updated algorithm.

Modern browsers that are updated to their most recent version will support SHA-2.

Both firms have called on the body that draws up browser security standards, known as the CA/Browser Forum, to support its proposal to operate a two-tier system. The CA/Browser Forum has yet to respond.

Source: bbc.com

  • 11.12.2015
  • Share:

Comments (5)

    • 03.10.2022

    levofloxacin medication <a href="https://adutasteride.com/">buy dutasteride</a> zantac 300mg price

    • 03.10.2022

    Thanks so much for giving everyone an extraordinarily terrific possiblity to discover important secrets from this website. It's always very terrific and also jam-packed with amusement for me and my office acquaintances to search your website the equivalent of 3 times in 7 days to study the newest issues you have got. Not to mention, we are at all times motivated with all the powerful tactics you give. Some 4 points in this post are completely the most effective I've had. <a href="http://www.off-whiteshoes.us.com" >off white</a> off white

    • 03.10.2022

    I precisely needed to say thanks again. I do not know the things I might have carried out in the absence of the smart ideas discussed by you concerning such area. It was before a real alarming case for me, but coming across your specialised technique you managed it took me to weep with gladness. Extremely grateful for the help as well as expect you realize what a great job you happen to be getting into instructing people today all through your web site. I'm certain you have never got to know all of us. <a href="http://www.bape-clothing.us" >a bathing ape</a> a bathing ape

    • 03.10.2022

    I simply had to thank you so much once more. I do not know what I could possibly have gone through without the actual methods contributed by you concerning such subject. Entirely was an absolute horrifying condition for me, however , noticing the very specialized strategy you handled that took me to jump over fulfillment. Extremely thankful for this information and hope that you comprehend what a powerful job you are always doing educating other individuals through the use of your webblog. Probably you've never got to know all of us. <a href="http://www.monclersoutletstore.com" >moncler jacket</a> moncler jacket

    • 03.10.2022

    I wanted to type a brief note to thank you for some of the remarkable tips and hints you are giving at this website. My prolonged internet look up has now been compensated with brilliant details to write about with my relatives. I would state that that most of us website visitors are very much lucky to exist in a fantastic place with many lovely people with very helpful opinions. I feel rather happy to have seen your entire website and look forward to so many more entertaining moments reading here. Thanks again for everything. <a href="http://www.goyardshandbag.us" >goyard outlet</a> goyard outlet

Your comment