Re:Distrust of Symantec TLS Certificates
by Ajedi32 on Wednesday September 05, 2018 @02:32PM
(#17920717)
Are you sure? Paypal.com's Symantec-issued certificate still works in Chrome, at least on my PC: https://www.paypal.com/
[ Parent
| on HN ]
Re:Distrust of Symantec TLS Certificates
by wp381640 on Wednesday September 05, 2018 @08:10PM
(#17922951)
Can confirm here PayPal's Symantec Class 3 EV SSL CA - G3 signed certificate validates in Chrome 68 and 69 but returns NET::ERR_CERT_SYMANTEC_LEGACY on Chrome 70
They really need to update their certificate soon
Re:Distrust of Symantec TLS Certificates
by user5994461 on Wednesday September 05, 2018 @02:38PM
(#17920779)
I couldn't be more sure. My company had hundreds of certificates issued from Symantec, who was our main supplier. Basically, all our websites broke the day Chrome was updated. It was hell.
If it were actually allowed, I would upload some of the certificates and write a blog post to show you.
Paypal has an EV, I don't have EV. Maybe these were not blacklisted. The rest was.
Re:Distrust of Symantec TLS Certificates
by Globz on Wednesday September 05, 2018 @04:56PM
(#17921839)
When I visit paypal and open up the console I see the following warning :
The SSL certificate used to load resources from https://www.paypalobjects.com will be distrusted in M70. Once distrusted, users will be prevented from loading these resources. See https://g.co/chrome/symantecpkicerts for more information.