{"id":269701,"date":"2018-07-26T10:02:13","date_gmt":"2018-07-26T08:02:13","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=269701"},"modified":"2018-07-26T10:03:38","modified_gmt":"2018-07-26T08:03:38","slug":"chrome-70-canary-drops-support-for-old-symantec-security-certificates","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/269701-chrome-70-canary-drops-support-for-old-symantec-security-certificates.html","title":{"rendered":"Chrome 70 Canary drops support for old Symantec security certificates"},"content":{"rendered":"<p>Google has released the first nightly build of Chrome 70 for developers, which drops support for all certificates issued by Symantec&#8217;s old certificate authority infrastructure before 1 December 2017.<\/p>\n<p>The issue with Symantec&#8217;s certificate authority dates back to March 2017, when Google and Mozilla engineers discovered that Symantec misissued 127 SSL certificates. As an investigation continued, the estimate grew to 30,000 certificates.<\/p>\n<p>Bleeping Computer <strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/google-outlines-ssl-apocalypse-for-symantec-certificates\/\" target=\"_blank\" rel=\"noopener\">reported<\/a><\/strong> that because Symantec was one of the biggest certificate authorities on the Internet, few dared react.<\/p>\n<p>Google took the lead with a proposal to remove support for Symantec&#8217;s certificates in Chrome, including\u00a0Symantec-owned brands like Thawte, VeriSign, Equifax, GeoTrust, and RapidSSL. The rest of the industry followed its lead.<\/p>\n<p>One of the major problems Mozilla and Google uncovered was that Symantec had misissued test certificates between\u00a0April 2009 and September 2015.<\/p>\n<p>Mozilla <strong><a href=\"https:\/\/wiki.mozilla.org\/CA:Symantec_Issues#Issue_D:_Test_Certificate_Misissuance_.28April_2009_-_September_2015.29\" target=\"_blank\" rel=\"noopener\">reported<\/a><\/strong> that this included\u00a0domains Symantec did not own or control, and for which domain validation was not performed.<\/p>\n<p>Among the domains in Symantec&#8217;s publicly-trusted hierarchies was a certificate for www.google.com.<\/p>\n<p>A beta version of Chrome 70 is expected to be available by the end of August, with a\u00a0<strong><a href=\"https:\/\/www.chromium.org\/developers\/calendar\" target=\"_blank\" rel=\"noopener\">full release<\/a><\/strong> set for 16 October 2018.<\/p>\n<h3 class=\"my-4\">Now read:\u00a0<a href=\"https:\/\/mybroadband.co.za\/news\/security\/268107-chrome-uses-more-ram-thanks-to-spectre-vulnerability-fixes.html\">Chrome uses more RAM thanks to Spectre vulnerability fixes<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Google has released the first nightly build of Chrome 70 for developers.<\/p>\n","protected":false},"author":23,"featured_media":217834,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[1567,167,411],"class_list":["post-269701","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-chrome","tag-google","tag-symantec"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/269701"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=269701"}],"version-history":[{"count":2,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/269701\/revisions"}],"predecessor-version":[{"id":269723,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/269701\/revisions\/269723"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/217834"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=269701"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=269701"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=269701"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}