[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y ] [Search | Free Show | Home]

SYMANTEC IN DAMAGE CONTROL MODE

This is a blue board which means that it's for everybody (Safe For Work content only). If you see any adult content, please report it.

Thread replies: 8
Thread images: 1

File: iMMm2Jb6.png (18KB, 400x400px) Image search: [Google]
iMMm2Jb6.png
18KB, 400x400px
I strongly recommend distrusting all symantec CA certs immediately.

https://techcrunch.com/2017/03/27/google-is-fighting-with-symantec-over-encrypting-the-internet/
http://thehackernews.com/2017/03/symantec-ssl-certificates.html
https://www.symantec.com/connect/blogs/symantec-backs-its-ca
https://www.symantec.com/connect/blogs/message-our-ca-customers
>>
>>59650211
B but how???
>>
>>59651029
by using HTTP only

:^)
>>
>>59651029
Symantec Class3 Secure Server CA-G4
in your browser, distrust/delete the certificate with this sha1 checksum: "50 23 38 9C 5F 76 A0 7E F2 54 46 5E 4F 21 96 F8 14 45 B4 1E"
per OP's articles, google is dropping this cert from chromium
>>
Symantec owns a number of rather large CAs which makes distrusting them very difficult. Google is not just straight up cancelling their certs they're gradually phasing out older certs and they're going to make symantec certs expire quicker (eventually under a year) to discourage their use
>>
Is there a GUI or TUI tool for Linux to manage the SSL certificates in the Mozilla CA package?
>>
I need a quick rundown. Why is this important and what can I do to fix it?
>>
>>59655666
Symantec is a certificate authority, basically they're a trusted third party that certifies that a website is authentic. The problem is they've been issuing certificates to websites that were apparently forgeries.

There's not much any of us can do here. The security teams at Google, Microsoft, Apple, and Mozilla will probably get together and decide how to handle this. Google's proposal is probably the best option so they might all adopt that. Google is proposing they gradually phase out Symantec's certifications and limit their certifications to short terms of less than a year to discourage their usage or at least allow current ones to be phased out.
Thread posts: 8
Thread images: 1


[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y] [Search | Top | Home]

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible.
Read more on this topic here - https://archived.moe/talk/thread/1694/


If you need a post removed click on it's [Report] button and follow the instruction.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com.
If you like this website please support us by donating with Bitcoins at 16mKtbZiwW52BLkibtCr8jUg2KVUMTxVQ5
All trademarks and copyrights on this page are owned by their respective parties.
Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
This is a 4chan archive - all of the content originated from that site.
This means that RandomArchive shows their content, archived.
If you need information for a Poster - contact them.