intent to ship: sha2 windows signing

Skip to first unread message

Aki Sasaki

Mar 17, 2021, 5:11:33 PM3/17/21
to dev-platform
Per and .

We haven't made a product-level decision here, but a) it looks like may have silently EOLed sha1 timestamps since
Microsoft has EOLed sha1 signing years ago, and b) it may be the case that
changing the signature may only affect Windows 7 SP 0 users on first
install. I'm not 100% sure about the second point.

Should we continue testing and rolling out, or pause work here until we
make a product decision?

Aki Sasaki

Mar 18, 2021, 2:31:59 PM3/18/21
to dev-platform
Per, backwards compatibility
with win7 sp0 may not be a big issue, though I'm happy to delay rollout if
there are any additional concerns. I've linked sha2-signed artifacts in
that ticket; we may want to have a QA pass before we decide to roll out.
Reply all
Reply to author
0 new messages