4 ms·
The certificate is signed by a Google intermediate CA using GlobalSign as the root CA. I don't use Chrome but I find it hard to believe that Chrome now distrus
by bjpbakker 9y ago
The certificate is signed by a Google intermediate CA using GlobalSign as the root CA.
I don't use Chrome but I find it hard to believe that Chrome now distrusts Google's own CAs. A user errors seems more likely :)
- nolok 9y agoFor the record : those two parts (their CA / own services, and their teams responsible for security) are really well separated and it is not the first time a Google thingy is deemed unsafe by Google security. Whatever one thinks of Google, it's hard to not agree that they take security very seriously, both internal and external (and project zero is one of the best thing ever). Personally, I prefer it that way. Better to see "ahah, Google tells me Google is insecure" than allowing something flagged as bad just because it come from the same mothership.
- bjpbakker 9y ago> Whatever one thinks of Google, it's hard to not agree that they take security very seriously I completely agree. Don’t think I stated otherwise? Anyway, I find it hard to believe for any browser to untrust Google’s intermediate CA. And more so for Global Sign. That said I recon that especially if Chrome started distruating Google CA that we all heard about it ;)