[cabfpub] LV Certificates

Gervase Markham gerv at mozilla.org
Sat Dec 19 03:13:15 MST 2015


On 18/12/15 22:42, Peter Bowen wrote:
> The proposers make the claim "anywhere from 2-7% of global user
> agents are unable to use HTTPS sites utilizing SHA-2 signature
> algorithms”.  It would be helpful to have more concrete data.  Would
> CloudFlare and Facebook be willing to share data on the top user
> agents (including versions and OS platform) which would be receiving
> these LV certificates, if they are approved?  Both have publicly
> stated they are using the type of algorithm proposed in the ballot,
> so such data should not be hard to get.

It would also be good to work out what percentage of those have free
upgrade paths to SHA-2 supporting software. That is certainly true of
Windows XP SP2 and below.

Gerv


More information about the Public mailing list