<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000099">
<div class="moz-cite-prefix">I do have XP SP2 on my network but
rarely even powered up. What I find difficult to understand is
your use of the word "deprecate" in the context of MS and SHA1. In
my experience, SHA1 has pretty much not be used for quite a while
in favor of SHA2 (SHA-256). Thuderbird (an old version?) is on the
XP machine, not being used, would update, data on it has been
irrelevant for a long time. Let me know what you want are looking
for.<br>
<br>
I read into this and other communications that TB is in someway
going to incorporate security certificates???<br>
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<font face="Lucida Calligraphy">
<small><small><small>
---<br>
John L Jacobs, Retired Network Engineer<br>
4105 Primrose Way<br>
Napa, Ca 94558-1595<br>
Ph: 415-738-2550<br>
<br>
<br>
<hr>
</small></small></small>
<br>
</font>Wayne Mery (Thunderbird QA) wrote:<br>
</div>
<blockquote cite="mid:567B06A6.7040706@lehigh.edu" type="cite">Thunderbird
38.5.0 is available, and users are getting automatic updates. See
<a class="moz-txt-link-freetext" href="https://www.mozilla.org/thunderbird/38.5.0/releasenotes">https://www.mozilla.org/thunderbird/38.5.0/releasenotes</a> (the notes
are not yet available via Thunderbird)
<br>
<br>
Now some special notes and a request:
<br>
<br>
* In a week or two a version 38.5.1 will be made available. It is
planned, and not necessarily a security update. The primary
purpose, together with 38.5.0, is to allow Windows XP users to
UPDATE Thunderbird after Microsoft deprecates SHA1 on the XP
platform [1]. (The same thing is being done for Firefox [2])
<br>
<br>
* Request - if you have access to an XP SP2 system, we want to
hear from you. We need *SP2* users to do some testing. Please
email me to volunteer.
<br>
<br>
* Similar work will be done the Thunderbird beta channel.
<br>
<br>
* For general information about sha-1/sha-2 (not in the context of
the product update process) see
<a class="moz-txt-link-freetext" href="https://blog.cloudflare.com/sha-1-deprecation-no-browser-left-behind/">https://blog.cloudflare.com/sha-1-deprecation-no-browser-left-behind/</a>
<br>
<br>
[1] <a class="moz-txt-link-freetext" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1234339">https://bugzilla.mozilla.org/show_bug.cgi?id=1234339</a>
<br>
[2] <a class="moz-txt-link-freetext" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1079858">https://bugzilla.mozilla.org/show_bug.cgi?id=1079858</a>
<br>
_______________________________________________
<br>
tb-enterprise mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:tb-enterprise@mozilla.org">tb-enterprise@mozilla.org</a>
<br>
<a class="moz-txt-link-freetext" href="https://mail.mozilla.org/listinfo/tb-enterprise">https://mail.mozilla.org/listinfo/tb-enterprise</a>
<br>
<br>
<br>
</blockquote>
<br>
</body>
</html>