Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates

Re:Intent to Deprecate and Remove: Trust in Existing Symante... by tedunangst on Thursday March 23, 2017 @04:55PM (#13944176)

Obviously they get another cert, but only serve it to chrome users via SSL handshake fingerprinting, and serve the Symantec cert to everybody else...

[ Parent | on HN ]

Re:Intent to Deprecate and Remove: Trust in Existing Symante... by wtetzner on Friday March 24, 2017 @09:34AM (#13948795)

I can't tell if you're joking.

Just in case you're not, if they went through all the trouble to get another cert for Chrome, why wouldn't they just use it for everyone?

[ Parent | on HN ]

Re:Intent to Deprecate and Remove: Trust in Existing Symante... by agwa on Friday March 24, 2017 @12:02PM (#13949818)

I suspect it was a joke, but you raise a very important question. Unfortunately, some clients (likely embedded devices) trust only Symantec roots, since that's the CA the website was using at the time the developer slapped together their code.

[ Parent | on HN ]