Skip to content

Commit e0b9fc5

Browse files
authored
remove paragraphs about 1024-bit roots from README
they haven't been relevant for a long time
1 parent 9427a5a commit e0b9fc5

File tree

1 file changed

+0
-14
lines changed

1 file changed

+0
-14
lines changed

README.rst

-14
Original file line numberDiff line numberDiff line change
@@ -30,20 +30,6 @@ Or from the command line::
3030

3131
Enjoy!
3232

33-
1024-bit Root Certificates
34-
~~~~~~~~~~~~~~~~~~~~~~~~~~
35-
36-
Browsers and certificate authorities have concluded that 1024-bit keys are
37-
unacceptably weak for certificates, particularly root certificates. For this
38-
reason, Mozilla has removed any weak (i.e. 1024-bit key) certificate from its
39-
bundle, replacing it with an equivalent strong (i.e. 2048-bit or greater key)
40-
certificate from the same CA. Because Mozilla removed these certificates from
41-
its bundle, ``certifi`` removed them as well.
42-
43-
In previous versions, ``certifi`` provided the ``certifi.old_where()`` function
44-
to intentionally re-add the 1024-bit roots back into your bundle. This was not
45-
recommended in production and therefore was removed at the end of 2018.
46-
4733
.. _`Requests`: https://requests.readthedocs.io/en/master/
4834

4935
Addition/Removal of Certificates

0 commit comments

Comments
 (0)