diff options
| author | Masahiro FUJIMOTO <mfujimot@gmail.com> | 2021-08-17 11:37:07 +0900 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-08-17 11:37:07 +0900 |
| commit | 98a7793a51bdbdeefb172842e677dca22eb779e5 (patch) | |
| tree | f07cde27678193afe366832bd58c958657fadc6c /files/zh-cn/web/security/weak_signature_algorithm | |
| parent | 6c30dec8016abec2fba8caf0bd07d0e145c37caf (diff) | |
| parent | a28f6c8632ced6d91d311614d96ab643e5ef7058 (diff) | |
| download | translated-content-98a7793a51bdbdeefb172842e677dca22eb779e5.tar.gz translated-content-98a7793a51bdbdeefb172842e677dca22eb779e5.tar.bz2 translated-content-98a7793a51bdbdeefb172842e677dca22eb779e5.zip | |
Merge branch 'mdn:main' into 20210811-orphaned/Web/API/NavigatorLanguage
Diffstat (limited to 'files/zh-cn/web/security/weak_signature_algorithm')
| -rw-r--r-- | files/zh-cn/web/security/weak_signature_algorithm/index.html | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/files/zh-cn/web/security/weak_signature_algorithm/index.html b/files/zh-cn/web/security/weak_signature_algorithm/index.html new file mode 100644 index 0000000000..1b3963f2ec --- /dev/null +++ b/files/zh-cn/web/security/weak_signature_algorithm/index.html @@ -0,0 +1,32 @@ +--- +title: 弱签名算法 +slug: Web/Security/Weak_Signature_Algorithm +tags: + - Cryptography + - Guide + - Security + - 密码学 + - 指南 + - 安全 +translation_of: Web/Security/Weak_Signature_Algorithm +--- + +<p><span class="seoSummary">在给{{Glossary("Digital certificate", "数字证书")}}{{Glossary("Signature/Security", "签名")}}时，用到的哈希算法的强度对证书的安全性至关重要。本文将提供一些已知的弱签名算法的信息，以便你在适当的时候避免使用它们。</span></p> + +<p>弱的哈希算法可以使攻击者能够伪造证书。技术进步使网络攻击变得更加可行，随着新型的网络攻击不断被发现，我们不鼓励使用旧的算法，并最终移除了对它们的支持。</p> + +<h2 id="SHA-1">SHA-1</h2> + +<p>从 2017 年开始，主流浏览器不再认为 SHA-1 证书安全。应该使用那些采用更安全的哈希算法（如 SHA-256 或 SHA-512）的证书。</p> + +<h2 id="MD5">MD5</h2> + +<p>对基于 MD5 的签名的支持在 2012 年初被移除。</p> + +<h2 id="See_also">相关资料</h2> + +<ul> + <li><a href="https://blog.mozilla.org/security/2014/09/23/phasing-out-certificates-with-sha-1-based-signature-algorithms/">Mozilla Security Blog 关于弃用 SHA-1 的文章</a></li> +</ul> + +<p>{{QuickLinksWithSubpages("/zh-CN/docs/Web/Security")}}</p>
\ No newline at end of file |