3 ms·
I thought they were dropping some support of SSL certificates in regards to symantec [0] starting in 59 but I see no mention in this post (unless I missed it).
by fosco 9y ago
I thought they were dropping some support of SSL certificates in regards to symantec [0] starting in 59 but I see no mention in this post (unless I missed it). does anyone have further information? I am not familiar with blink process however allowing insecure creation of ssl certificates seems like the wrong way forward.
[0] https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/eUAKwjihhBs/rpxMXjZHCQAJ https://groups.google.com/a/chromium.org/forum/#!msg/blink-d...
- dtemp 9y agoI am also interested in this. This whole process has been a shitshow. I'd just like a decision to be made and a little warning so that I have time to replace my RapidSSL certs (they are signed by GeoTrust which is owned by Symantec).
- asclepi 9y agoGoogle and Symantec settled on this. Symantec will create new certificate roots which will be cross-signed by both their existing roots and another certificate authority. This allows the trust in the existing roots to be removed in the long term and it has significantly less impact for current Symantec customers than the original proposal. A good summary of the latest developments can be found on https://www.thesslstore.com/blog/google-and-symantec/ https://www.thesslstore.com/blog/google-and-symantec/