intent to ship: sha2 windows signing

Skip to first unread message

Aki Sasaki

Mar 17, 2021, 5:11:33 PMMar 17
to dev-platform
Per and .

We haven't made a product-level decision here, but a) it looks like may have silently EOLed sha1 timestamps since
Microsoft has EOLed sha1 signing years ago, and b) it may be the case that
changing the signature may only affect Windows 7 SP 0 users on first
install. I'm not 100% sure about the second point.

Should we continue testing and rolling out, or pause work here until we
make a product decision?

Aki Sasaki

Mar 18, 2021, 2:31:59 PMMar 18
to dev-platform
Per, backwards compatibility
with win7 sp0 may not be a big issue, though I'm happy to delay rollout if
there are any additional concerns. I've linked sha2-signed artifacts in
that ticket; we may want to have a QA pass before we decide to roll out.
Reply all
Reply to author
0 new messages