Chrome's Plan to Distrust Symantec Certificates

ghostbrainalpha wrote: post #2

If you are using the free SSL provided your Webhost "Let's Encrypt" certificate, you will be fine. That is not a Symantec cert.

When will google decide let's encrypt is not secure enough and start giving a warning around that.

Re: Chrome's Plan to Distrust Symantec Certificates

#5

Post by [deleted] » Mon, Sep 11, 2017, 7:50 PM UTC

[deleted]

Re: Chrome's Plan to Distrust Symantec Certificates

#6

Post by SteveNuts » Mon, Sep 11, 2017, 7:51 PM UTC

wolco wrote: post #4

ghostbrainalpha wrote: post #2

If you are using the free SSL provided your Webhost "Let's Encrypt" certificate, you will be fine. That is not a Symantec cert.

When will google decide let's encrypt is not secure enough and start giving a warning around that.

Considering Google is a major sponsor of the project, I'd say likely never.

Not to mention that Google has been pushing hard for https on all sites, which is exactly LE's goal.

Re: Chrome's Plan to Distrust Symantec Certificates

#7

Post by sofaofthedamned » Mon, Sep 11, 2017, 7:52 PM UTC

wolco wrote: post #4

ghostbrainalpha wrote: post #2

If you are using the free SSL provided your Webhost "Let's Encrypt" certificate, you will be fine. That is not a Symantec cert.

When will google decide let's encrypt is not secure enough and start giving a warning around that.

When they do the stupid that other CAs have?

Re: Chrome's Plan to Distrust Symantec Certificates

#8

Post by castis » Mon, Sep 11, 2017, 7:53 PM UTC

wolco wrote: post #4

ghostbrainalpha wrote: post #2

If you are using the free SSL provided your Webhost "Let's Encrypt" certificate, you will be fine. That is not a Symantec cert.

When will google decide let's encrypt is not secure enough and start giving a warning around that.

Probably some time after Let's Encrypt shows some form of negligence while issuing certificates.

Re: Chrome's Plan to Distrust Symantec Certificates

#9

Post by [deleted] » Mon, Sep 11, 2017, 7:53 PM UTC

[deleted]

Re: Chrome's Plan to Distrust Symantec Certificates

#10

Post by agwa » Mon, Sep 11, 2017, 7:53 PM UTC

sofaofthedamned wrote: post #7

wolco wrote: post #4

Earlier quoted context omitted.

When will google decide let's encrypt is not secure enough and start giving a warning around that.

When they do the stupid that other CAs have?

Exactly. And to be clear, the malfeasance by Symantec is voluminous and well-documented: https://wiki.mozilla.org/CA:Symantec_Issues

Distrusting Symantec is not an arbitrary action as some people seem to believe.