Symantec says it will reissue digital certs distrusted by Chrome

Symantec looks to be caving in its dispute with Google’s Chrome over the trustworthiness of digital certificates — which underlie the green padlock in the browser’s address bar that tells consumers it’s safe to bank or shop online. Chrome, citing what it says are repeated failures by Symantec to comply with the issuance rules regarding digital security certificates, last week threatened to stop fully trusting them. Chrome’s proposal demands that Symantec re-validate and re-issue the millions of certificates it’s created and would strip Symantec of the authority to issue extended validation, or EV, certificates at all. Because the proposal could mean Chrome users would no longer be able to shop or bank safely at many major e-commerce sites that currently use Symantec certificates, the proposal effectively challenged Symantec to a game of chicken. Over the weekend, Symantec blinked. In a blog post titled “A Message to our [Certificate Authority, or] CA Customers,” Symantec Senior Vice President and […]

The post Symantec says it will reissue digital certs distrusted by Chrome appeared first on Cyberscoop.

Continue reading Symantec says it will reissue digital certs distrusted by Chrome

Intermediate CA Caching Could Be Used to Fingerprint Firefox Users

The way Firefox caches intermediate CA certificates could allow for the fingerprinting of users and the leakage of browsing details, a researcher warns. Continue reading Intermediate CA Caching Could Be Used to Fingerprint Firefox Users