YOU... SHA-1 NOT PASS! Microsoft magics away demonic hash algorithm from Windows updates, apps

[InfoSec News <alerts () infosecnews org>]

https://www.theregister.com/2020/07/29/microsoft_windows_sha_1/

By Shaun Nichols in San Francisco
The Register
July 29, 2020

Microsoft is preparing to once and for all drop support for the SHA-1 hash 
algorithm.

Redmond this week said that on Monday, August 3, Windows downloads signed 
using SHA-1 will no longer be offered by the Windows app'n'updates 
download center, the last step in a SHA-2 transition that has been going 
on for more than a year now.

"To support evolving industry security standards, and continue to keep you 
protected and productive, Microsoft will retire content that is 
Windows-signed for Secure Hash Algorithm 1 (SHA-1) from the Microsoft 
Download Center on August 3, 2020," Microsoft said in a tech bulletin.

"This is the next step in our continued efforts to adopt Secure Hash 
Algorithm 2 (SHA-2), which better meets modern security requirements and 
offers added protections from common attack vectors."

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
Follow InfoSec News on Twitter
https://twitter.com/infosecnews_
Follow InfoSec News on LinkedIn
https://www.linkedin.com/company/infosecnews/