Google Intent to Deprecate and Remove: Trust in existing Symantec-issued Certificates
Google has recently identified a series of failures by Symantec Corporation to properly validate certificates, and as a result Google has stated its intent to take the following steps relating to the Chrome browser:
- Reduce the maximum accepted validity period of newly-issued Symantec certificates to nine months or less
- Implement a rolling distrust of all currently-trusted Symantec-issued certificates, forcing the certificates to be replaced with new certificates before the original would expire
- Remove the EV (Extended Validation) treatment of Symantec EV certificates for at least the next year
Since Google Chrome has a majority of the browser market, this will have a significant impact on the industry and potentially on your web assets. If you currently have Symantec certificates, you may have to frequently rotate certificates since the maximum accepted validity period will be reduced to nine months or less.
In an effort to protect the safety of internet users, avoid disruption, and minimize the management burden to you, Comodo will help all affected Symantec, Thawte and Geotrust customers. Comodo will replace the lifetime on your existing Symantec/Thawte/Geotrust certificates at no cost. For example, a three year certificate with two years remaining can be replaced with a three year Comodo certificate for the cost of one year.
To discuss this issue and explore how you can avoid potential disruption,