winfsp / sshfs-win

SSHFS For Windows
https://winfsp.dev
Other
4.78k stars 250 forks source link

Installer should not be signed with only SSH1 #386

Open rdebath opened 1 year ago

rdebath commented 1 year ago

Under some configurations Windows no longer accepts SHA1 signatures as valid. They suggest using either using SHA256 (SHA2-256) or signing with both SHA1 and SHA2.

This is because Google has demonstrated the ability to generate two files with the same SHA1 hash.