Skip to content

Commit

Permalink
remove paragraphs about 1024-bit roots from README
Browse files Browse the repository at this point in the history
they haven't been relevant for a long time
  • Loading branch information
alex authored Jan 13, 2023
1 parent 9427a5a commit e0b9fc5
Showing 1 changed file with 0 additions and 14 deletions.
14 changes: 0 additions & 14 deletions README.rst
Original file line number Diff line number Diff line change
Expand Up @@ -30,20 +30,6 @@ Or from the command line::

Enjoy!

1024-bit Root Certificates
~~~~~~~~~~~~~~~~~~~~~~~~~~

Browsers and certificate authorities have concluded that 1024-bit keys are
unacceptably weak for certificates, particularly root certificates. For this
reason, Mozilla has removed any weak (i.e. 1024-bit key) certificate from its
bundle, replacing it with an equivalent strong (i.e. 2048-bit or greater key)
certificate from the same CA. Because Mozilla removed these certificates from
its bundle, ``certifi`` removed them as well.

In previous versions, ``certifi`` provided the ``certifi.old_where()`` function
to intentionally re-add the 1024-bit roots back into your bundle. This was not
recommended in production and therefore was removed at the end of 2018.

.. _`Requests`: https://requests.readthedocs.io/en/master/

Addition/Removal of Certificates
Expand Down

0 comments on commit e0b9fc5

Please sign in to comment.