Chrome will start rejecting Symantec-issued SSL certs

Thread replies: 8
Thread images: 1

Anonymous
Chrome will start rejecting Symantec-issued SSL certs 2017-03-23 05:20:31 Post No. 59542634
[Report] Image search: [Google]

File: symantec_416x416.jpg (13KB, 416x416px) Image search: [Google]

13KB, 416x416px

Chrome will start rejecting Symantec-issued SSL certs Anonymous 2017-03-23 05:20:31 Post No. 59542634 [Report]

https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/eUAKwjihhBs/rpxMXjZHCQAJ

The action comes after Symantec was found to have misissued 30,000 SSL certs and did nothing to ensure there won't be further issuance.

Extended Validation (green bar) will be turned off for EV certs issued by Symantec in the next release.

The validity period (from issuance) for Symantec certs will decrease with each Chrome release from now on from 33 months to 9 months max.

Anonymous 2017-03-23 06:10:12 Post No.59543258
[Report]

Anonymous 2017-03-23 06:10:12 Post No.59543258 [Report]

>anti-virus
do people really are this stupid resource eating bloaty piece of shit which datamines you and instead of securing your system adds even more 0 day holes
are you this stupid people?

Anonymous 2017-03-23 06:12:46 Post No.59543290
[Report]

Anonymous 2017-03-23 06:12:46 Post No.59543290 [Report]

>>59543258
This has nothing to do with their "anti-virus" business.

Symantec owns Verisign and Thawte, controlling about 15% of the SSL cert market.

Anonymous 2017-03-23 06:39:28 Post No.59543626
[Report]

Anonymous 2017-03-23 06:39:28 Post No.59543626 [Report]

This is enormous. 15% of the market is understating it quite a bit.

Verisign own GeoTrust, Symantec, and Thawte. That's quite a lot of the commercial certificates out there which will rapidly become untrusted as to EV and will be phased out due to - well, they fucked up. There was widespread misissuance, and evidence (via Certificate Transparency - thanks, Adam and Ryan!) has been found of it.

Verisign are also the custodians for the .COM and .NET domains from ICANN, and have been since their inception. ICANN need to be informed of an irregularity of this enormity.

Anonymous 2017-03-23 06:42:39 Post No.59543670
[Report]

Anonymous 2017-03-23 06:42:39 Post No.59543670 [Report]

>>59543626
My bank uses Symantec.

In fact, I think most banks use Symantec/Verisign.

Anonymous 2017-03-23 07:27:56 Post No.59544266
[Report]

Anonymous 2017-03-23 07:27:56 Post No.59544266 [Report]

>>59543670
yep
idk any that don't

Anonymous 2017-03-23 08:34:35 Post No.59545247
[Report]

Anonymous 2017-03-23 08:34:35 Post No.59545247 [Report]

Man fuck google, "we're big enough that we can bully anyone into doing shit we want"

Anonymous 2017-03-23 08:46:29 Post No.59545426
[Report]

Anonymous 2017-03-23 08:46:29 Post No.59545426 [Report]

>>59544266
US Bank uses Entrust.

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible. Read more on this topic here - https://archived.moe/talk/thread/1694/

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible.
Read more on this topic here - https://archived.moe/talk/thread/1694/