|
|
|
|
<html>
<head>
<style>
.sw_message P{margin:0px;padding:0px;}
.sw_message {FONT-SIZE: 12pt;FONT-FAMILY:Tahoma,Arial,Helvetica,sans-serif;background:white;}
</style>
</head>
<body class=3d"sw_message">
OK try a new build when it is up to make sure it all works as it should for =
you and if there are no problems let me know and I'll make surgemail use SHA=
1 by default. (also let me know if you do encounter any difficulties so I ca=
n investigate and resolve them) <div><div><br></div><div>If you let me =
know what platform you are after I can make sure there is a new build there =
for you to try.</div><div><br></div><div>Marijn<br _moz_editor_bogus_node=3d=
"TRUE" _moz_dirty=3d""></div></div><br><br>--- Original message --- <br>Subj=
ect: Re: [SurgeMail List] SSL Certificate issues. <br>From: Neil Herber (nos=
pam) <nospam@eton.ca> <br>To: <surgemail-list@netwinsite.com> <br>Dat=
e: 05/05/2009 11:33 PM<br><br>On 2009-05-05 6:37 AM, Surgemail Support (Mari=
jn) wrote: <br>...snip ... <br> <br>> Please let me know if it works correct=
ly for you. If it proves to work <br>> as it should and others find CA's ar=
e all going this way, we may well <br>> make this the surgemail default at =
some stage. <br>> <br>> Marijn <br>> <br> <br> From everything I have read=
, most CAs phased out MD5 in January 2009. For more details see: <br><a tar=
get=3d"_blank" href=3d"http://www.win.tue.nl/hashclash/rogue-ca/">http://www=
..win.tue.nl/hashclash/rogue-ca/ </a><br> <br>In particular see: <br><a targe=
t=3d"_blank" href=3d"http://www.kb.cert.org/vuls/id/836068">http://www.kb.ce=
rt.org/vuls/id/836068 </a><br> <br>where they say: <br>"Do not use the MD5 a=
lgorithm <br>Software developers, Certification Authorities, website owners,=
and users should avoid using the MD5 algorithm in any capacity. As previou=
s research has demonstrated, it should be considered cryptographically bro=
ken and unsuitable for further use. <br> <br>Scrutinize SSL certificates sig=
ned by certificates using the MD5 algorithm" <br> <br>-- Neil Herber <br> <=
br>
</body></html>
------=_NextPart_surgeweb_964875208_mpa=--
Last
Next
|
