Seems like the SSL certificates that CloudFlare automatically generates for sites are SHA-1 signed.
Anyone know if they're planning to upgrade to SHA-2?
Anyone know if they're planning to upgrade to SHA-2?
1. Reissue our SHA-1 based certs to meet the deadlines specified by Chrome so that no customer sees a warning in Chrome.
2. In the future, we will also have an automatic fallback system so that for poor clients (that only support SHA-1) we are able to dynamically provide 'old' certificates. For up to date clients we will not use SHA-1 at all.
(For anyone else, here's the link: https://groups.google.com/a/chromium.org/d/msg/blink-dev/2-R...)