July 2017
Distrust of Symantec Certificates by Google
Google are to distrust all Symantec SSL certificates (issued before 1st June 2016) in their Chrome browser, from 8th August 2017.
In March 2017, Google and Mozilla found Symantec had mis-issued 127 SSL certificates (against industry rules set by the CA/B Forum) but after further investigation the number rose to 30,000
Mozilla, Microsoft and Apple were considering options but allowed Google to conduct the investigation alone.
Symantec denied mis-issuing any certificates.
However, Symantec will now have to partner with another CA who will issue the certificates on behalf of Symantec.
There is talk of Symantec exploring the idea of selling its CA business
The GeoTrust, Thawte, and RapidSSL brands (owned by Symantec) are also affected.
Anyone with a certificate issued before 1st June 2016 must re-validate the replacement order and have the SSL re-issued and re-installed.
In March 2017, Google and Mozilla found Symantec had mis-issued 127 SSL certificates (against industry rules set by the CA/B Forum) but after further investigation the number rose to 30,000
Mozilla, Microsoft and Apple were considering options but allowed Google to conduct the investigation alone.
Symantec denied mis-issuing any certificates.
However, Symantec will now have to partner with another CA who will issue the certificates on behalf of Symantec.
There is talk of Symantec exploring the idea of selling its CA business
The GeoTrust, Thawte, and RapidSSL brands (owned by Symantec) are also affected.
Anyone with a certificate issued before 1st June 2016 must re-validate the replacement order and have the SSL re-issued and re-installed.