<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Even if those certificate authorities have not been hacked, you have to ask yourself "do you thrust these thirth party in your chain". For websites that need to be reached over the internet by unknown clients, you need them. But if you know your clients e.g. your companys computer you can/should use your own CAs. In my opinion there should be a more detailed section about certificate authorities. </div><div><br></div><div>Andreas Mirbach<br><br>Sent from my iPad</div><div><br>On 11.01.2014, at 21:36, Rainer Hoerbe <<a href="mailto:rainer@hoerbe.at">rainer@hoerbe.at</a>> wrote:<br><br></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"><div>Finden SHA1-collisions requires 2**63 tries (may be a bit less). Faking a certificate this way is quite expensive, there are cheaper ways.</div><div><br></div>No you do not be worried, because the security value of those commercial certificates ist near zero anyway. GoDaddy have been insuniated that they have been hacked in the past. The question is why to pay for a certificate of low value, when you can get the same product elsewhere for free, e.g. Startssl.<div><br></div><div>- Rainer</div><div><br><div><div>Am 11.01.2014 um 15:02 schrieb Ahmad Bilal <<a href="mailto:ahmadbilal200854@gmail.com">ahmadbilal200854@gmail.com</a>>:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">I have a question. I recently bought a certificate from godaddy, and during the installation I chose SHA-2, but the Certificate Signing Request in raw form has SHA-1 written on it, and not SHA-2. Should I be worried?<br>
<br><br clear="all"><div><br></div>-- <br><div dir="ltr"><i><b><font face="arial, helvetica, sans-serif">Ahmad Bilal</font></b></i><div><br></div></div>
</div>
_______________________________________________<br>Ach mailing list<br><a href="mailto:Ach@lists.cert.at">Ach@lists.cert.at</a><br><a href="http://lists.cert.at/cgi-bin/mailman/listinfo/ach">http://lists.cert.at/cgi-bin/mailman/listinfo/ach</a><br></blockquote></div><br></div></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Ach mailing list</span><br><span><a href="mailto:Ach@lists.cert.at">Ach@lists.cert.at</a></span><br><span><a href="http://lists.cert.at/cgi-bin/mailman/listinfo/ach">http://lists.cert.at/cgi-bin/mailman/listinfo/ach</a></span><br></div></blockquote></body></html>