MS KB3123479: Deprecation of SHA-1 Hashing Algorithm for Microsoft Root Certificate Program
Medium Nessus Plugin ID 87875
SynopsisThe remote Windows host is missing an update that improves cryptography and digital certificate handling.
DescriptionThe remote Windows host is missing Microsoft KB3123479, an update that restricts the use of certificates with SHA1 hashes, this restriction being limited to certificates issued under roots in the Microsoft root certificate program. This update increases the difficulty of carrying out some spoofing, phishing, and man-in-the-middle attacks.
SolutionMicrosoft has released a set of patches for Windows 7, 2008 R2, 8, 2012, 8.1, 2012 R2, and 10.