Chrome won't trust Symantec-backed SSL as of Jun 1 unless they account for bogus certs

Discussion in 'other security issues & news' started by lotuseclat79, Nov 1, 2015.

  1. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,385
    Chrome won't trust Symantec-backed SSL as of Jun 1 unless they account for bogus certs

    -- Tom
     
  2. Gullible Jones

    Gullible Jones Registered Member

    Joined:
    May 16, 2013
    Posts:
    1,466
    On the one hand, good.

    On the other... Pot vs. kettle, anyone?
     
  3. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    4,968
    Location:
    U.S.A.
  4. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    3,882
    Location:
    Outer space
  5. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    7,124
    http://arstechnica.com/security/201...antec-issues-more-illegit-https-certificates/
     
  6. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    4,968
    Location:
    U.S.A.
    Not too good for Chrome users ...........

    Chrome doesn't [immediately] check certificate revocation, so a revoked certificate can be used in an attack just as easily as an unrevoked certificate," Ayer told Ars. "By default, other browsers fail open and accept a revoked certificate as legitimate if the attacker can successfully block the browser from contacting the revocation server."
     
  7. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    7,124
    http://searchsecurity.techtarget.co...ore-clarity-on-certificate-transparency-catch
     
  8. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    7,124
    https://arstechnica.com/security/20...e-woodshed-for-mis-issuing-30000-https-certs/
     
  9. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    7,124
    https://www.infosecurity-magazine.com/news/symantec-claims-offers/
     
  10. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    7,124
Loading...