Comodo SSL Certificates Not Affected by MD5 Flaw

Comodo has announced that none of its certificates is created using the MD5 hash function. The MD-5 certificate algorithm has been known to be subject to potential compromise since 1996. Recently, a team of security researchers exploited a flaw in the MD-5 hash function, demonstrating the potential to generate bogus certificates that would be trusted by major web browsers. Though there have been no documented attacks arising from this, SSL users are advised to check with their respective certification authorities to determine if their certificates were issued using MD-5, and if so, consider replacing them with more secure alternatives.

write your comments about the article :: 2009 Computing News :: home page