SSL Google nullifies all Symantec EV SSL Certificates

eva2000 · Aug 28, 2018

final good bye is nearly here Attention: Final Google distrust date for Symantec CA SSL certificates is approaching

Google Chrome’s final distrust of Symantec CA SSL certificates is rapidly approaching. Anyone using the Beta version of Chrome will receive the Chrome 70 update around September 13th, at this point any website still using an original Symantec CA brand SSL certificate will start to receive browser warnings.

This affects all Symantec CA brand SSL certificates issued before December 1, 2017. And it applies to:

Symantec

Thawte

GeoTrust

RapidSSL

The stable version of Chrome 70 is set to arrive around October 16, at which point over 60% of the internet will not be able to reach websites that are still using one of the affected certificates. We are using the Beta release as our deadline to give you a little bit of a buffer in case replacing certificates takes a day or two.

DigiCert, which purchased the Symantec CA brand following its agreement with Google, has been handling the re-issues for Symantec customers and it has done a spectacular job.
Click to expand...

eva2000 · Oct 11, 2018

You'd think folks would of switched out their Symantec SSL certs by now but nooo It's a cert: Hundreds of big sites still unprepared for starring role in that Chrome 70's show

Hundreds of high-profile websites are still unprepared for the total disavowal of legacy Symantec-issued digital certificates that will kick in with the release of Chrome 70 next week.

Chrome 70, out on 16 October, will no longer recognise Symantec-issued certificates including legacy-branded Equifax, GeoTrust, RapidSSL, Thawte and VeriSign.

Next week's deadline completes a withdrawal of support that has been ongoing for the last year. Phase one of the process took place in April with the arrival of Chrome 66 and meant that certs issued before the start of June 2016 stopped working for users of the latest and subsequent releases of Google's browser software.

Chrome 70 marks the end of trust for all TLS server certificates issued by Symantec's old infrastructure. The decision to distrust the certs comes after Google Chrome's browser team lost "confidence in the trustworthiness of Symantec's infrastructure" following a series of transgressions against industry best practice.

The disavowal is a community response to alleged violations but Google is on the front line of implementing the shutout.

Scott Helme, the security researcher behind securityheaders.com and report-uri.com, applied scripts to web crawler data to work out which of the web's top million sites are still using Symantec certificates. A total of 1,139 were running them as of 25 September, just three weeks away from the 16 October deadline, Helme's research revealed.

Some affected sites including ferrari.com and postnord.se have changed their certs over recent days so that they are no longer throwing up warnings, but hundreds of others worldwide remain unprepared.

Helme's latest figures are an update on a similar exercise he carried out in April, when he discovered that around 500 of the top million sites were about to stop functioning smoothly in April and 4,971 in October unless they replaced their digital certificate.
Click to expand...

deltahf · Oct 11, 2018

Just goes to show how many websites out there are poorly maintained...

eva2000 · Oct 11, 2018

Yeah... this is probably one of the benefits of automating SSL certificate issuance/renewal when it has matured like Letsencrypt. Probably for some of those large companies still on Symantec SSL certs, the original person that deployed the SSL cert may not even be with the company now as SSL certs in past had 2-5 yr validity. So folks who took over may also not be familiar with the manual renewal process in house ?

Log in / Register

Forums

Want to subscribe to topics you're interested in?

SSL Google nullifies all Symantec EV SSL Certificates

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

deltahf Premium Member Premium Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Want to subscribe to topics you're interested in?

SSL Google nullifies all Symantec EV SSL Certificates

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

deltahf Premium Member Premium Member

eva2000 Administrator Staff Member

.