[cabfpub] Ballot 118 - SHA1 Sunset

[Gervase Markham]

On 28/10/14 17:49, kirk_hall at trendmicro.com wrote:
> 1.  Will CRLs with a  SHA-1 signature be rejected or receive a negative
> browser UI in Chrome in _2016_?  (Same question for Firefox and Microsoft.)

Firefox does not check CRLs.

> 2. Will OCSP responses with a  SHA-1 signature be rejected or receive a
> negative browser UI in Chrome in _2016_?  (Same question for Firefox and
> Microsoft.)

I very much doubt it. I can't speak definitively as I'm not writing the
code, but Ryan's logic makes sense to me.

Gerv