2
1
I'm using Chrome on a closed lab network. I have no control over the servers I'm talking to, which use SHA1-signed certs for HTTPS. Should they be using better certs? Of course, but I can't fix that. I just don't want to be bothered about it by my browser every time I open the sites.
Does Chrome have a flag or registry setting I could change that will stop warning about SHA1 certs? Obviously this would be dangerous for use on the actual internet, but not every network is under threat of attack.
This may be of use http://stackoverflow.com/questions/26388405/chrome-disable-ssl-checking-for-sites .
– None – 2017-04-25T09:47:20.127@iain - that switch does stop giving me cert errors, though it'd be nice to tell the difference between "uses a signature algorithm that nation-state could maybe spoof" and "presents a totally and obvious bogus cert" – James B – 2017-04-25T09:59:17.650
this is a Chrome config question and not a security question – schroeder – 2017-04-25T10:59:50.507
1
Does this help?
– garethTheRed – 2017-04-25T17:22:19.547I can't test it right now but I will pass it along to our admins -- that sounds a lot like what I was looking for. Thanks! – James B – 2017-04-26T08:08:40.577