{"id":7268,"date":"2017-04-08T07:17:05","date_gmt":"2017-04-08T14:17:05","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=7268"},"modified":"2019-04-20T16:24:12","modified_gmt":"2019-04-20T16:24:12","slug":"chrome-engineer-proposing-to-take-hatchet-to-symantec-certs","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=7268","title":{"rendered":"Chrome engineer proposing to take hatchet to Symantec certs"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[As possible fallout after a late response (30 days) to inquiries by Mozilla and Google to Symantec about test certs Symantec had issued for google.com w\/o Google's knowledge back in <a href=\"https:\/\/arstechnica.com\/security\/2015\/09\/symantec-employees-fired-for-issuing-rogue-https-certificate-for-google\/\" target=\"_blank\" rel=\"noopener noreferrer\">2015<\/a>, Google Chrome may (at this point internally proposing &#8211; not a scheduled implementation) stop recognizing the (full) validity of Symantec certs after fixed durations.\nGoogle currently (with Chrome 57) distrusts Symantec issued certs at their face value but with Chrome 59 would reduce it to 33 months (1023 days)  then with Chrome 60 it would reduce to 27 months..and so forth.  Eventually Chrome would only recognize Symantec certs as valid for a maximum date from issuance of 9 months (279) days.\nHere is the proposed Chrome rollout schedule:\n59\t Jun 6th, 2017\n60\t Aug 1st, 2017\n61\t Sep 12th, 2017\n62\t Oct 24th, 2017\n63\t Dec 12th, 2017\nMany companies currently use GeoTrust and Thawte which are operated by Symantec.  This means those companies would need to accept Chrome&#8217;s requirement for re-issuance more frequently or else change their CA root authorities (i.e. find another cert vendor.)  Symantec currently holds approximately 35-40% of the cert market.  (Remember the days when Thawte was the independent underdog?)\nThis is all hay at this point but something worth tracking if ever so diligently or out of curiosity.  The <a href=\"https:\/\/groups.google.com\/a\/chromium.org\/forum\/#!topic\/blink-dev\/eUAKwjihhBs%5B1-25%5D\" target=\"_blank\" rel=\"noopener noreferrer\">discussion<\/a> has been led along by Ryan Sleevi &#8211; the Chrome engineer at Google proposing it.\n]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"1","amazon-product-single-asin":"0470396784","amazon-product-content-location":"3","amazon-product-content-hook-override":"2","amazon-product-excerpt-hook-override":"3","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"2","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[67,62],"tags":[],"class_list":["post-7268","post","type-post","status-publish","format-standard","hentry","category-practices","category-research"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7268"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7268\/revisions"}],"predecessor-version":[{"id":7870,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7268\/revisions\/7870"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}