This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Èròjà atẹ̀lélànà yii ni a ti fi pamọ́ fọ́jọ́ pípẹ́. Jọ̀wọ́ béèrè ìbéèrè titun bí o bá nílò ìrànwọ́.

What is the Mozilla Firefox policy concerning SHA-1 Client authentication certificates?

  • 1 èsì
  • 3 ní àwọn ìṣòro yìí
  • 2 views
  • Èsì tí ó kẹ́hìn lọ́wọ́ philipp

more options

Hi ! I read "https://blog.mozilla.org/security/2015/10/20/continuing-to-phase-out-sha-1-certificates/" article but my question is what about Client authentication certificates that are issued using SHA-1 like Qualified Certificates issued to clients in order to make client authenticated SSL connection and sign/encrypt/decrypt documents? Are they going to be valid and until when ?

Hi ! I read "https://blog.mozilla.org/security/2015/10/20/continuing-to-phase-out-sha-1-certificates/" article but my question is what about Client authentication certificates that are issued using SHA-1 like Qualified Certificates issued to clients in order to make client authenticated SSL connection and sign/encrypt/decrypt documents? Are they going to be valid and until when ?

Ọ̀nà àbáyọ tí a yàn

hi, as it is mentioned at the end of the article, please post specific questions about sha-1 deprecation at https://groups.google.com/forum/#!forum/mozilla.dev.security.policy - the developers involved in that decision will read along there but not here in the support forum. thank you for your understanding!

Ka ìdáhùn ni ìṣètò kíkà 👍 3

All Replies (1)

more options

Ọ̀nà àbáyọ Tí a Yàn

hi, as it is mentioned at the end of the article, please post specific questions about sha-1 deprecation at https://groups.google.com/forum/#!forum/mozilla.dev.security.policy - the developers involved in that decision will read along there but not here in the support forum. thank you for your understanding!