Windows Enforcement of SHA1 Certificates - TechNet Articles - United States (English) - TechNet Wiki

Microsoft SHA-1 Plan SHA-1 is a legacy cryptographic hash that many in the security community believe is no longer secure. Using the SHA-1 hashing algorithm in digital certificates could allow an attacker to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. Microsoft, in collaboration with other members of the industry, is working to phase out the SHA-1 protocol and to

[khei-fuji]

timestamp は証明書の期限のことでいいのかな？それとも署名したときのタイムスタンプってことなのかな？

[dekasasaki]

なんだかんだ書いてあるけど影響範囲としては"Microsoft Trusted Root Program"に参加してるCA達だけってことですかね。おれおれ証明書は放置(つまりSHA-1でも信じる)、というスタンスに見える。