Expired SSL cert or just me

[Coffee]got that yesterday and figured it would go away, so here I am back on... good thing I came here first, was gonna post something like this... oh well, Good Day All.

Quote:

---

Originally Posted by J

And SSLv3 disabled now too. Not that I worry about it as much here, we are providing basic privacy security for posters, not protecting financial or ultra-sensitive information. Had already done that on all of my eCommerce sites/clients.

---

Yeah, I neglected to add "not that it matters much for this site".

Quote:

---

Originally Posted by cfortune

Cert just expired at 10:00 something AM today and trot is right, no difference in the security of the site prior to 10:00.

When you do a renewal, make sure to have your certificate authority do a SHA-256 certificate. Chrome and local cert stores for Microsoft (I think anyway, haven't looked too much into this) will start throwing certificate errors sometime in November. That's what Google has ball parked for their release which will enforce this. I just got done replacing all our certificates at work because of this.

Also, SSL v3 has a vulnerability right now and TLS without v3 fallback should be configured.

---

This is good advice. The new certificate is unfortunately SHA1 still. Edit: Nevermind, was looking at the thumbprint.