3 ms·
So chrome can no longer browse ~30% of the secured web. People instead install a different browser that isn't so "serious", as you put it. Oh and the message th
by scrollaway 10y ago
So chrome can no longer browse ~30% of the secured web. People instead install a different browser that isn't so "serious", as you put it. Oh and the message that sends to website owners? "Just don't use HTTPS, your SSL certificate could be invalidated with no prior warning for reasons that have nothing to do with you".
Easy, right? Just like a nuclear plant.
- tajen 10y agoI don't know, what's best for security? The message is don't use a dodgy provider. Yes it's a pain for customers, but don't forget we're mostly talking about level 2/3 certificates (EV, wildcards), so we're talking about banks and major companies here. They both should and have enough resources to monitor the trustworthiness of their providers. In the current case, Symantec's falsifications has been know for long enough.
- cryptarch 10y agoI do think the "drop it like it's hot" approach could work, but it would require browser vendor coordination, so that Symantic https stops working on all major browsers at the same time/day. And honestly, banks should have the expertise and resources to change certs in a day or two, and if they don't that's on them.