The root certificates on my Windows XP machine have expired. As far as I understand it, Windows XP only uses crytography for doing "intranet" data transfers, which in my case is irrelevant because I have no intranet, it is a standalone machine.

Can I just disable the whole crypto API on the machine (which is probably insecure anyway), or does it have a specific necessity to be there?

  • 1
    You can't disable CryptoAPI on Windows XP (or any other version), because a lot of internal parts of operating systems rely on it. If you don't need it, just don't use. – Crypt32 Aug 16 '18 at 17:42
  • 1
    Also, you should not rely on XP being secure as it has been EoL/EoS since 2014 and there are VERY few security updates to it at this point (only ones deemed absolutely critical are released for it still). You should stop using XP as soon as possible and upgrade to a maintained version (or use something else altogether such as macOS or Linux/BSD). – Jesse P. Aug 16 '18 at 23:44
  • @Crypt32 Can you be more specific? – Tyler Durden Aug 17 '18 at 1:21
  • It is enough to mention that LSA (local security authority) actively uses CryptoAPI. – Crypt32 Aug 17 '18 at 4:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.