I'm confused by the blurring of sha-2 on the CSR with the hash function used for the cert.
I'm confused by the blurring of sha-2 on the CSR with the hash function used for the cert. The hash used in the CSR signature has nothing to do with the hash used to sign the certificate. I don't know of any CA that requires a sha-2 CSR to emit a sha-2 cert; does CertSimple? I agree it would be cryptographically correct, and I bet there's a nasty vulnerability in there that'll be exposed the day SHA-1 is broken---but that day isn't today.
Posted by brians on Apr 13, 2015, 5:33 PM
Tags
Related issues
- This is my biggest problem with agents, they constantly defensively code for cases that have no chance of happening and in most cases a p...
- I wish there was something like LEAN for biology.
- The issue is really the extreme difficulty of programming them, especially for anything sequential (rather than combinatorial).
- I probably could have beared with it if it was only limited to programming, but it showing up in creative fields has made me feel all sor...
- I hate that I'm in deep enough to know what you mean.
- The biggest problem with “AI” is that big corps are shoving it down our throats.
Raise real-world problems, find people facing the same issue, and discuss solutions.7,000 issues0 comments
reliability (Other)
This is my biggest problem with agents, they constantly defensively code for cases that have no chance of happening and in most cases a p...
I wish there was something like LEAN for biology.
The issue is really the extreme difficulty of programming them, especially for anything sequential (rather than combinatorial).
I probably could have beared with it if it was only limited to programming, but it showing up in creative fields has made me feel all sor...
I hate that I'm in deep enough to know what you mean.
The biggest problem with “AI” is that big corps are shoving it down our throats.
in the middel of a coding session with 5.6 sol.
[Hero Run] 535B-A23B on 18T tokens
I'm confused by the blurring of sha-2 on the CSR with the hash function used for the cert.
I'm confused by the blurring of sha-2 on the CSR with the hash function used for the cert. The hash used in the CSR signature has nothing to do with the hash used to sign the certificate. I don't know of any CA that requires a sha-2 CSR to emit a sha-2 cert; does CertSimple? I agree it would be cryptographically correct, and I bet there's a nasty vulnerability in there that'll be exposed the day SHA-1 is broken---but that day isn't today.
Comments (0)
No comments yet. Start the discussion.