I was looking at the SSL certificates of various major web sites and I notice that Google is using a 256-bit SSL certificate:
Common Name = *.google.com Subject Alternative Names = *.google.com, *.android.com, ... urchin.com, www.goo.gl, youtu.be, youtube.com, youtubeeducation.com Serial Number = 0FC98430DAD8C2FD SHA1 Thumbprint = D8B657CD0DB96AC349B3491D229285BD18F6C7FA Key Length = 256 Signature algorithm = SHA256 + RSA (excellent)
I can't believe that Google would use a cert that is not secure, so there must be an explanation.
Is there something special about the way Google is using this that makes it secure? Or am I being too pessimistic about the security of 256 bit SSL certs?