Google’s official blog announced that it will gradually reduce the security instructions of SHA-1 certificates in the Chrome browser. But what is interesting is that Google.com currently uses a SHA-1 signed certificate, but the certificate will expire within 3 months. Google will use SHA-2 signed certificates from 2015. No serious weaknesses have been found in the SHA-1 algorithm, but the cost of forging certificates is getting cheaper.

Overview

Most secure websites are using an insecure algorithm, and Google has just declared that this will be a long-term emergency.

About 90% of websites that use SSL encryption use the SHA-1 algorithm to prevent their identity from being impersonated. When you visit a website, you are guaranteed to be accessing genuine Facebook instead of sending your password to an attacker. Unfortunately, the SHA-1 algorithm is very fragile and has been for a long time. The security of this algorithm is decreasing year by year, but it is still widely used on the Internet. Its replacement, SHA-2, is robust enough and should be widely supported.

Recently Google stated that if you are using the Chrome browser, you will notice that the browser's warnings for a large number of safe websites are constantly changing.