Chrome’s Plan to Distrust Symantec Certificates

ronjor · Sep 12, 2017

September 11, 2017

Posted by Devon O’Brien, Ryan Sleevi, Andrew Whalley, Chrome Security
At the end of July, the Chrome team and the PKI community converged upon a plan to reduce, and ultimately remove, trust in Symantec’s infrastructure in order to uphold users’ security and privacy when browsing the web.
Click to expand...

Minimalist · Feb 7, 2018

Beware the looming Google Chrome HTTPS certificate apocalypse!

Security engineer Arkadiy Tetelman, who works at Airbnb according to his blog, decided to run a test in which he grabbed the certificate information from the one million biggest websites on the internet, in terms of traffic as rated by Alexa, and tested to see if they would break.

The script took 11 hours to run and turned up some very interesting results: of the one million websites, just 11,510 are going to go TITSUP in April, with 91,627 on the chopping block in October.
Click to expand...

https://www.theregister.co.uk/2018/02/07/beware_the_coming_chrome_certificate_apocalypse/

EDIT: also

The issue doesn't raise the slightly troubling fact that Google has basically put an entire company's certificate-issuing operation out of business by declaring that it would no longer accept Symantec certificates. That's a scary amount of power to have.
Click to expand...

guest · Oct 8, 2018

With Chrome 70, hundreds of popular websites are about to break
October 8, 2018
https://techcrunch.com/2018/10/08/chrome-hundreds-of-sites-to-break/

A lot of secure sites are set to grind to a halt with security error messages in the next version of Google Chrome, after the browser will drop trust for a major HTTPS certificate provider following a series of security incidents.

Chrome 70 is expected to be released on or around October 16, when the browser will start blocking sites that run older Symantec certificates issued before June 2016, including legacy branded Thawte, VeriSign, Equifax, GeoTrust and RapidSSL certificates.

Security researcher Scott Helme found 1,139 sites in the top one million sites ranked by Alexa, including Citrus, SSRN, the Federal Bank of India, Pantone, the Tel-Aviv city government, Squatty Potty and Penn State Federal to name just a few.
Click to expand...

Log in or Sign up

Chrome’s Plan to Distrust Symantec Certificates

ronjor Global Moderator

Minimalist Registered Member

guest Guest

Log in or Sign up

Chrome’s Plan to Distrust Symantec Certificates

ronjor Global Moderator

Minimalist Registered Member

guest Guest

Useful Searches