David Heath
Wednesday, 31 December 2008 16:32
Obviously, SHA-1 isn’t as broken as MD5, but experts in the field have recommended for some time that it should not be used beyond 2010. To this end NIST has sponsored a competition to select a new algorithm which will become SHA-3. The competition closed on October 31 2008 and a total of 64 entries were received of which 51 were assessed as meeting the initial criteria. A final decision is expected in 2012.
Right now, there is nothing agreed to move forward in the short term. Although Bruce Schneier, quoted elsewhere noted that this entire point is rather moot as users (and browsers) rarely check the validity of certificates in any situation.
Think again. Most businesses only have PART of a DR plan - and this spells business disaster in the event of an IT disaster.
Download The Seven Sins of Disaster Recovery White Paper now and find out how you can prevent this happening to you.