3 ms·

I want to thank the Chrome people that continued to investigate the initial issues with Symantec certificates rather than just take their word for it that it wa

by mtgx 9y ago

I want to thank the Chrome people that continued to investigate the initial issues with Symantec certificates rather than just take their word for it that it was a honest one-time mistake. I imagine there has been a lot of tension between Google and Symantec over the past year because of this, so it must not have been easy to keep poking at Symantec. After all, Symantec almost was one of the "too big too fail" CAs. Almost.

ajr0 9y ago
To add to this sentiment. I think routine checks should done to all CAs, they are an important part of how "trust" works on the internet. and I see their importance only growing at this point. Google should not be the only company trying to enact change in this area. [edit: so many typos - oops]
- mintplant 9y ago
  > Google should not be the only company trying to enact change in this area. Fortunately they're not. Mozilla is involved here as well; just look at [0] and the other *.mozilla.org links in this thread. They also broke the WoSign/StartCom debacle. [0] https://wiki.mozilla.org/CA:Symantec_Issues https://wiki.mozilla.org/CA:Symantec_Issues
chris_wot 9y ago
Not just the Google Chrome guys, but also the Mozilla team who were also investigating a variety of issues.