Hacker News Reader

I thought they were dropping some support of SSL certificates in regards to symantec [0] starting in 59 but I see no mention in this post (unless I missed it). does anyone have further information? I am not familiar with blink process however allowing insecure creation of ssl certificates seems like the wrong way forward.

[0] https://groups.google.com/a/chromium.org/forum/#!msg/blink-d...

View on HN

Google and Symantec settled on this. Symantec will create new certificate roots which will be cross-signed by both their existing roots and another certificate authority. This allows the trust in the existing roots to be removed in the long term and it has significantly less impact for current Symantec customers than the original proposal.

A good summary of the latest developments can be found on https://www.thesslstore.com/blog/google-and-symantec/

I am also interested in this. This whole process has been a shitshow. I'd just like a decision to be made and a little warning so that I have time to replace my RapidSSL certs (they are signed by GeoTrust which is owned by Symantec).

Reply on news.ycombinator.com