Advice Request Why so many programs today still use SHA1???

[empleat]

So many programs still use SHA1 and not only some small ones. For example EA's gaming client Origin uses only SHA1. Which is strange, given it is outdated. Sure they have money for a certificate... Also some small programs on net have only SHA1 on their site How hard is to make another checksum That I could understand yet. But why can I meet only with SHA1 for programs from big companies? So strange!

 

[Wasar]

Yes SHA-1 is insecure and you need to migrate to secure and up-to-date algorithms. The migration to new algorithms is already in place, but for a total migration from SHA-1 to a safer algorithm you need the necessary time, since it is not something you do with two mouse clicks.

 

[empleat]

Yes SHA-1 is insecure and you need to migrate to secure and up-to-date algorithms. The migration to new algorithms is already in place, but for a total migration from SHA-1 to a safer algorithm you need the necessary time, since it is not something you do with two mouse clicks.

Yeah but it is insecure like 3 years no? And we are talking about EA, it has billions of $... Maybe it is, because it is only gaming client so they don't care. No idea. Yeah they would probably migrate from SHA1 to SHA2/3 on all their products. Makes sense.

Ok interesting, thanks for the answer.

PS: Also some small companies supposedly don't know about it. Interesting fact: 21 % websites still use SHA1.