Removing SHA-1 for signatures in Fedora
Removing SHA-1 for signatures in Fedora
Posted Mar 17, 2022 8:25 UTC (Thu) by rwmj (subscriber, #5474)In reply to: Removing SHA-1 for signatures in Fedora by taladar
Parent article: Removing SHA-1 for signatures in Fedora
The primary goal should be the introduction of a mechanism that makes removal of insecure cryptographic algorithms in general easier in the future in software affected by making uses and implementations easier to discover as well as making algorithms configurable where they are used and flexible where they are part of some standard.
This is sort of what crypto-policies does. In fact this SHA-1 change is done by changing the system crypto policy, and I don't think very much else changed if anything.
