4 ms·
May Symantec's authority can be revoked completely, if proof of misuse is found?
by tajen 10y ago
May Symantec's authority can be revoked completely, if proof of misuse is found?
- JoshTriplett 10y agoAssuming that Symantec doesn't manage to deflect onto Bluecoat, and assuming that browser vendors are willing to actually revoke one of the largest CAs for misuse rather than wagging their finger. The last time Symantec made a "mistake" with their CA (https://security.googleblog.com/2015/10/sustaining-digital-certificate-security.html https://security.googleblog.com/2015/10/sustaining-digital-c...), Google said "Therefore we are firstly going to require that as of June 1st, 2016, all certificates issued by Symantec itself will be required to support Certificate Transparency." Interesting wording, "by Symantec itself". And now, a few days before June 1st, Symantec issues an intermediate CA certificate to a known vendor of MITM systems, so that Bluecoat can issue certificates themselves rather than having their "certificates issued by Symantec itself". I wonder if Bluecoat will support Certificate Transparency?