Mozilla Re-enables SHA-1 Certificate Support in Firefox

Found on eWEEK on Thursday, 07 January 2016
Browse Internet

In an unexpected move, when browser vendor Mozilla released Firefox 43.0.4 on Jan. 6, it re-enabled support for newly issued SHA-1(Secure Hash Algorithm 1) security certificates. Mozilla had previously set Firefox to reject new SHA-1 signed Secure Sockets Layer/Transport Layer Security certificates as of Jan. 1.

"When their users can't access Websites, they simply switch browsers, so sticking with this policy does more harm than good to both Mozilla and their ability to raise the bar on security," he said. "I don't think Mozilla is giving up on their position, just being practical."

So basically, Mozilla trades security for market share.