• Emily Stark's avatar
    Blacklist the Superfish root certificate · 533ab462
    Emily Stark authored
    The Superfish software causes certificate errors on every HTTPS page load
    starting in M57, because it uses SHA-1 signatures. We've decided to blacklist
    the root to prevent these errors from being bypassable and guide users into
    cleaning up their machines. Blacklisting the root will also protect users who
    may have uninstalled the software but not the root, or for whom SHA-1 is allowed
    by policy.
    
    BUG=734590
    
    Change-Id: I99d38b0d8940d52dfc3355b9ca3aa619ddfec3ee
    Reviewed-on: https://chromium-review.googlesource.com/565747
    Commit-Queue: Emily Stark <estark@chromium.org>
    Reviewed-by: default avatarRyan Sleevi <rsleevi@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#485422}
    533ab462
b6fe9151402bad1c06d7e66db67a26aa7356f2e6c644dbcf9f98968ff632e1b7.pem 3.17 KB