No. 1 Story

ACCC clears Optus to scrap HFC network and use NBN instead

The ACCC has cleared, provisionally, the proposed deal between Optus and NBN Co under which Optus is to be paid around $800m to shut down its HFC network and transfer customers onto the NBN. read more

Related Articles

Adoption of cloud computing has reached a tipping point  - but don’t expect legacy...
In yet another blow to the Facebook IPO this week, following the withdrawal of...
Recruitment technology and social media have played a significant role in growing business in...
It's no longer unusual for a household or small business to use a mixed...
It's no longer unusual for a household or small business to use a mixed...

More From

The Latest MD5 Attack - The Sky Continues to Fall

Your IT - Home IT

Anyone with a voice on this topic has been saying for some time that MD5 is broken and that CAs should move to SHA-1.  As I said on the previous page, all but 6 of the root CAs have taken this advice; those six are aware of the issue.

The problem is that SHA-1 is also rather suspect.

Obviously, SHA-1 isn’t as broken as MD5, but experts in the field have recommended for some time that it should not be used beyond 2010.  To this end NIST has sponsored a competition to select a new algorithm which will become SHA-3.  The competition closed on October 31 2008 and a total of 64 entries were received of which 51 were assessed as meeting the initial criteria.  A final decision is expected in 2012.

Right now, there is nothing agreed to move forward in the short term.  Although Bruce Schneier, quoted elsewhere noted that this entire point is rather moot as users (and browsers) rarely check the validity of certificates in any situation.