SHA-1 Certificates Will Soon Be Deemed Invalid by Google Chrome

At least the new ones.

As a part of Google’s program to get rid of the unsafe certificates and clean up the web, the search giant has announced that starting from early 2016, Google Chrome 48 will display a certificate error if the site:

– Uses the SHA-1 based certificate,
– The certificate is issued after January 1, 2016
– And it chains to a public CA

What’s next? Starting from January 1, 2017, Google Chrome, Microsoft Edge and Mozilla Firefox will stop supporting SHA-1 certificates completely, resulting in a fatal web site error. However, the search giant might push the date forward to July 1, 2016, which would be a welcome move.

[Via: Google]