Google Chrome will soon block sites with old certificates

[Newsfeed]

Google Chrome will soon block sites with old certificates

Google Chrome 70 is set to release in the coming weeks, and may result in many “secure” websites being blocked by the browser.

TechCrunch reported that Chrome will show security error messages for sites which run Symantec certificates issued before June 2016. This includes legacy Thawte, VeriSign, Equifax, GeoTrust, and RapidSSL certificates.

 

[Thor]

Good move.

 

[Polymathic]

Recently I have noticed that a large number of sites lack security certificates on Chrome.

 

[sajunky]

Who owns Internet?

 

[Solarion]

They will. A lot of sites if you right click > Inspect, you'll see a whole bunch of warnings pertaining to:

The SSL certificate used to load resources from https://XYA.co.za will be distrusted in M70. Once distrusted, users will be prevented from loading these resources. See https://g.co/chrome/symantecpkicerts for more information.

https://security.googleblog.com/2018/03/distrust-of-symantec-pki-immediate.html

 

[Visser]

Chrome should be careful of an unintended consequence.... more and more people may find it harder to find and access websites using their browser. Although Google means well, this may cause millions of users rather using Microsoft's Edge instead.

 

[Solarion]

Chrome should be careful of an unintended consequence.... more and more people may find it harder to find and access websites using their browser. Although Google means well, this may cause millions of users rather using Microsoft's Edge instead.

Soon this is going to be like the source of many complaints worldwide. If you need to get business done and you see this. I don't even want to imagine as your typical average user doesn't put two and two together to just use another browser.

 

[Quest10n]

Is Google the only browser that is implementing this or will the others follow?