3

I just checked Amazon's certificate and it shows it is SHA-1 signed. But Chrome does not show any warnings, like it does (the red cross) for other websites with SHA-1 signed certificates.

Am I looking at this wrong?

0

1 Answer 1

5

Chrome is flagging SHA-1 signed certs based on their expiration date.

For the full details on the different dates and indicators, please review:

http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html

The cert Amazon has deployed expires Oct 2nd, 2015. enter image description here

2
  • Awesome! Nitty gritty detail.
    – sandyp
    Sep 4, 2015 at 23:30
  • @k1DBLITZ This question has some very comprehensive discussion on the sunsetting of sha-1 on major sites.
    – Nic Barker
    Sep 5, 2015 at 4:05

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .