You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
x.509
About this tag
The x.509 tag on WindowsForum.com covers discussions around Microsoft's policies and security updates related to X.509 certificates. Key topics include Microsoft's deprecation of the SHA-1 hashing algorithm for issuing X.509 certificates under the Microsoft Root Certificate Program, which affects SSL and code signing. The tag also addresses vulnerabilities in digital signatures that could lead to denial of service when processing specially crafted X.509 certificates. Additionally, there is content on Microsoft's long-term plan to transition to post-quantum cryptography (PQC) across Windows, Azure, and Microsoft 365, which will impact X.509 certificate usage. These threads are relevant for IT professionals and system administrators managing certificate security in Windows environments.
Microsoft has set a firm, public timetable to make its entire product and service portfolio resilient to the quantum threat — committing to enable early adoption of quantum‑safe capabilities by 2029 and to complete a full transition to post‑quantum cryptography (PQC) across Windows, Azure...
Revision Note: V2.0 (May 18, 2016): Advisory updated to provide links to the current information regarding the use of the SHA1 hashing algorithm for the purposes of SSL and code signing. For more information, see Windows Enforcement of Authenticode Code Signing and Timestamping.
Summary...
Revision Note: V1.0 (January 12, 2016): Advisory published.
Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. The new policy no longer allows root certificate authorities to issue X.509 certificates using the SHA-1 hashing algorithm for the purposes of...
Revision Note: V1.0 (January 12, 2016): Advisory published.
Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. The new policy no longer allows root certificate authorities to issue X.509 certificates using the SHA-1 hashing algorithm for the purposes of...
Severity Rating:
Revision Note: V1.0 (November 12, 2013): Advisory published.
Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. The new policy will no longer allow root certificate authorities to issue X.509 certificates using the SHA-1 hashing...
Severity Rating: Important
Revision Note: V1.0 (November 12, 2013): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service when an affected web service processes a specially crafted X.509...
If you haven't had a chance to see the movie Gravity, I highly recommend you take the time to check it out. The plot moves a bit slowly at times, but director Alfonso Cuaron's work portrayal of zero gravity is worth the ticket price alone. Add in stellar acting and you end up with an epic movie...
Revision Note: V1.0 (November 12, 2013): Advisory published.
Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. The new policy will no longer allow root certificate authorities to issue X.509 certificates using the SHA-1 hashing algorithm for the purposes...
Revision Note: V1.0 (November 12, 2013): Advisory published.
Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. The new policy will no longer allow root certificate authorities to issue X.509 certificates using the SHA-1 hashing algorithm for the purposes...
Revision Note: Advisory published
Summary: Microsoft is aware that research was published at a security conference proving a successful attack against X.509 digital certificates signed using the MD5 hashing algorithm. This attack method would allow an attacker to generate additional...