AWS elasticloadbalancing documentation change
Summary
Added guidance to prefer highest SHA number when multiple SHA certificates are available in smart certificate selection.
Security assessment
Promotes use of stronger hashing algorithms (higher SHA versions) which improves cryptographic security, but does not address a specific vulnerability.
Diff
diff --git a/elasticloadbalancing/latest/application/https-listener-certificates.md b/elasticloadbalancing/latest/application/https-listener-certificates.md index c4fcaac33..5f06d38a4 100644 --- a//elasticloadbalancing/latest/application/https-listener-certificates.md +++ b//elasticloadbalancing/latest/application/https-listener-certificates.md @@ -37 +37 @@ The load balancer uses a smart certificate selection algorithm with support for - * Hashing algorithm (prefer SHA over MD5) + * Hashing algorithm (prefer SHA over MD5). If there are multiple SHA certificates, prefer the highest SHA number.