7 ms·
The issue is that Google did not communicate this properly. The only communication about StartSSL is here: https://security.googleblog.com/2016/10/distrusting
by jsiepkes 10y ago
The issue is that Google did not communicate this properly.
The only communication about StartSSL is here: https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html?m=1 https://security.googleblog.com/2016/10/distrusting-wosign-a... which says:
----8<------
Beginning with Chrome 56, certificates issued by WoSign and StartCom after October 21, 2016 00:00:00 UTC will not be trusted. Certificates issued before this date may continue to be trusted, for a time, if they comply with the Certificate Transparency in Chrome policy or are issued to a limited set of domains known to be customers of WoSign and StartCom.
---8<-----
Apparently "for a time" means Chrome 57 without any warning. Which I think is way too careless for dealing with such matters.