Microsoft: .NET Framework signed with SHA-1 algorithm will no longer be supported on April 26

If you're using versions 4.5.2, 4.6, or 4.6.1 of the .NET Framework, you've got to pay attention, these versions are now in the "end of support countdown".

On April 4, Microsoft officially issued a statement reminding that "Since April 26, 2022, Microsoft will no longer provide security patches and technical support for the .NET Framework 4.5.2, 4.6, and 4.6.1 versions. Windows 10 Enterprise Edition LTSC Version 4.6 of the .NET Framework built into 2015 will continue to be supported until October 2025. Other .NET Framework versions are not affected.”

Regarding this change, Microsoft explained: "The reason why Microsoft made this change is that the .NET Framework was previously digitally signed using a certificate of Hash Algorithm 1 (SHA-1). We are prioritizing support for newer digital certificates."

As early as 2015, there was research on "SHA-1 vulnerability collision attack allows hackers and attackers to forge digital certificates to carry out attacks". Because of this, Microsoft began to decide to replace the insecure SHA-1 hash algorithm with SHA-2 digital signatures.

In August 2020, Microsoft has officially used the SHA-2 algorithm in the Download Center. By May 9, 2021, all major Microsoft services and processes will begin to fully use the SHA-2 algorithm, including code signing, file hashing, and TLS certificates.

According to reports, in April last year, Microsoft announced that it will stop supporting the security patches and technical support of the .NET Framework 4.5.2, 4.6, and 4.6.1 versions from April 26, 2022. Almost there, Microsoft has once again issued an "ultimatum" about the change.

It is understood that this change will not affect the normal use of other .NET frameworks, so users of other versions can rest assured.

Of course, for users of .NET Framework versions 4.5.2, 4.6, 4.6.1, if they want to get proper support and protection, they can turn to other different versions of .NET, such as .NET Framework 4.6.2, NET Framework 3.5 SP1 or other options, these are safe (until Microsoft decides it's not safe).

About .NET

The .NET Framework is a free software development tool that helps developers build .NET applications, websites, and services. Users can run on multiple operating systems based on different .NET implementations.