0

In the Technet blog about Microsoft's SHA-1 deprecation policy I read the following quote:

For SSL certificates, Windows will stop accepting SHA1 end-entity certificates by 1 January 2017. This means any time valid SHA1 SSL certificates must be replaced with a SHA2 equivalent by 1 January 2017.

To me it is not 100% clear what is affected. I suppose that IE/Edge won't accept any SSL connections with SHA-1 certificates anymore. But what about web services? Will Web Service clients using Microsoft Libraries and Frameworks (e.g. .NET) not be able to call HTTPS web services that still use SHA-1 anymore?

Tobias Lott
  • 303
  • 3
  • 10

1 Answers1

1

Yes, the policy affects all Microsoft products that use CryptoAPI for certificate validation. This includes web services and .NET.

Crypt32
  • 12,850
  • 2
  • 41
  • 70