Google to Block Entrust Certificates in Chrome Starting November 2024 (thehackernews.com)
from Brkdncr@lemmy.world to technology@lemmy.world on 23 Jul 2024 19:08
https://lemmy.world/post/17881552

See also: …googleblog.com/…/sustaining-digital-certificate-…

#technology

threaded - newest

flappy@lemm.ee on 23 Jul 2024 19:57 next collapse

Almost bought my SMIME cert from them a while ago, but went with Certum instead.

QuadratureSurfer@lemmy.world on 24 Jul 2024 02:05 next collapse

In case anyone else is curious:

Why is Chrome taking action?

Certification Authorities (CAs) serve a privileged and trusted role on the Internet that underpin encrypted connections between browsers and websites. With this tremendous responsibility comes an expectation of adhering to reasonable and consensus-driven security and compliance expectations, including those defined by the CA/Browser TLS Baseline Requirements.

Over the past six years, we have observed a pattern of compliance failures, unmet improvement commitments, and the absence of tangible, measurable progress in response to publicly disclosed incident reports. When these factors are considered in aggregate and considered against the inherent risk each publicly-trusted CA poses to the Internet ecosystem, it is our opinion that Chrome’s continued trust in Entrust is no longer justified.

slumberlust@lemmy.world on 24 Jul 2024 12:18 collapse

Private Equity firm bought them out a while ago and they fucked around. Now it’s the find out phase.