Google to Discard Symantec's SSL Certificates
In a bid to enhance web security and encourage the use of secure connections, both Firefox and Chrome have made significant updates to their browsers. As of January 2017, these browsers began marking sites without SSL certificates as "unsafe" when they require passwords or payment card information. This update is set to become even more stringent in October 2017, when Chrome will mark all HTTP sites with forms as "Not secure."
SSL certificates, unique digital signatures, are essential for establishing secure, encrypted connections between a client and server, particularly for confidential information transfer. They act as a guarantee of the authenticity and integrity of the website, ensuring that the data exchanged remains private and secure.
This update applies to HTTP sites with search boxes, blogs with comments, and all HTTP pages visited in Incognito mode. The change in Chrome 62 will affect a wider range of HTTP sites, including those with text forms other than password or credit card fields. This is part of Google's ongoing efforts to promote secure web connections and discourage the use of insecure HTTP.
The update in Chrome 62 is a significant step towards making the web more secure by encouraging the use of HTTPS over HTTP. The change is likely to increase the adoption rate of HTTPS, as more site owners will seek to avoid the "Not secure" label.
Google's advice to purge digital certificates issued by Symantec before June 1, 2016, is a response to issues of trust and security. In 2015, Symantec was found to have issued 23 test certificates for five organizations without the domain owners' knowledge. This incident led to further audits revealing that Symantec had mis-issued a significant number of test certificates. As a result, Google, along with other browser vendors, announced plans to distrust certificates issued by Symantec prior to June 1, 2016, to ensure the security and integrity of digital certificates.
Professional Opinion Letters for EV SSL (Extended Validation SSL) are available as a product. EV SSL is a combination of cryptographic protocols designed for high-level security over the internet. When customers see the padlock icon, "https" prefix, and the green address bar in the URL, it indicates an EV SSL connection, signifying a secure, encrypted connection between the client and server.
In conclusion, the moves by Firefox and Chrome to mark insecure websites as "unsafe" or "Not secure" are part of a broader initiative to promote secure web connections and protect users from potential security risks. As the digital world continues to evolve, it is crucial for websites to adapt to these changes and prioritize the security of their users' data.
Data-and-cloud-computing technology plays a crucial role in reinforcing web security, with services like SSL certificates being essential for establishing secure connections between clients and servers. SSL certificates, which act as digital signatures, are increasingly necessitated due to updates made by browsers like Firefox and Chrome, with Chrome 62 marking all HTTP sites with forms as "Not secure" as part of Google's endeavor to promote secure web connections and discourage the use of insecure HTTP.