[OSM-dev] Migrating from SHA-1 to SHA-2 (HTTPS on OSM)

[Antje]

Hi,

Today I received an email from NameCheap that told me about the retirement of SHA-1 for HTTPS certificates and I realised that OpenStreetMap has HTTPS support. According to  https://shaaaaaaaaaaaaa.com/check/openstreetmap.org (a website that lets you check if a website is using SHA-1 or SHA-2), OpenStreetMap is apparently using SHA-1.

The email says that Google will begin to sunset SHA-1 this month (even though we have doubts about their maps, the SHA-1 news is still important). (source: Qualys Lab at https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know). Can OpenStreetMap please update their HTTPS Certificate to use SHA-2 instead of SHA-1?

Thanks,

Antje.