Hacker News Reader

Can someone post a summary of the part of the story hinted to by the headline? I couldn't find it.

It's one of the links early in the story. (It's pretty link heavy, so it can be hard to miss. 6th link in).

Basically, by 2015, Google will update Chrome to show websites with HTTPS certificates using SHA-1 as "insecure." The level of insecurity shown will get more severe over time, as well as being based on when your certificate expires. Here is the full link for details:

http://googleonlinesecurity.blogspot.com/2014/09/gradually-s...

That's What. The headline hints at Why, but never delivers.

This entire article is about Why. Read the "An attack on SHA-1 feels plenty viable to me" section for the most info.

It's a roundup of last week's news, and (hopefully) better all-around explanation and background for people with less technical knowledge. It also points people to another tool I made, https://shaaaaaaaaaaaaa.com, to actually do the SHA-1 check.

I see -- it's not announcing any news, or any new theories; it's just a roundup of last week's news.

Yes. Much like last week's news was. :-)

Reply on news.ycombinator.com