Story image

DigiCert conquers Google's distrust of Symantec certs

12 Dec 2018

After a long battle against Google, DigiCert has finally managed to re-establish online trust for its Symantec security certificates.

Since DigiCert bought Symantec’s Website Security and PKI business for US$950 million in 2017, the company has been on a mission to restore trust and replace more than five million Symantec certificates.

The saga came after Google  - and in particular Google Chrome – automatically distrusted all websites with Symantec security certificates and marked them as insecure. Over the last year DigiCert has been working with companies whose websites used the distrusted Symantec certificates, and replaced them with trusted DigiCert certificates free of charge.

When Google released Chrome 70, it signalled the end of Google’s Symantec root distrust plan, DigiCert says.

“DigiCert, along with our partners and customers, has executed an extraordinary certificate replacement process for a large segment of our industry. Our teams have worked many long hours to ensure this event had minimal impact to our customers and the Internet in general, and I am very grateful for their efforts,” explains DigiCert CEO John Merrill. 

“This could have been an extremely disruptive event to online commerce. But just over a year after DigiCert closed the acquisition of Symantec’s Website Security business, we have successfully completed our requirements for Chrome.”

DigiCert says it had a number of tasks relating to the certificate replacement plan. They include:

•    Managing wholesale replacement of Symantec’s multiple certificate authentication (CA) backend systems in one month between Nov. 1 and Dec. 1, 2017. •    Combining validation teams and training employees on DigiCert’s compliant CA processes. •    Revalidating domains and issuing more than 5 million replacement certificates for Symantec, VeriSign, Thawte, GeoTrust and RapidSSL customers. •    Revalidating more than 550,000 organisational identities that moved to DigiCert trusted roots. •    Providing support, tools and information to partners and customers to facilitate free replacements for all impacted TLS certificates. These efforts have included millions of emails, in-console messages, and uncounted outbound phone calls to reach all affected.   •    Redesigning and improving validation systems and automation across the CA infrastructure to improve scaling and provide a consistent, customer-centric, fast experience. 

“Even with the intense focus on the replacement process, we are excited to be showing growth in 2018,” says Merrill.

DigiCert says it remains committed to providing CA services and aims to ensure customers’ confidence in the company’s processes and the TLS industry in general.

The company has made a number of improvements including major investments into infrastructure and data centres; partnerships that are able to serve quantum computers with post-quantum cryptography; and developing secure solutions powered by blockchain.

With the completion of our part of this unprecedented distrust management event, we want to thank our partners and customers, as well as the browser and security communities, for working with us,” says Merrill. 

“Moving forward, we are excited about refocusing our talented teams to produce needed advancements in trustworthy communications for the web PKI and a variety of emerging markets and technologies. As we do, we will stay true to the values that have made DigiCert the most trusted brand in our industry.” 

Apple's AirPods now come with 'Hey Siri' functionality
The new AirPods come with a standard case or a Wireless Charging Case that holds additional charges for more than 24 hours of listening time.
NZ investment funds throw weight against social media giants
A consortium of NZ funds managing assets worth more than $90m are appealing against Facebook, Twitter, and Google following the Christchurch terror attacks.
Poly appoints new A/NZ managing director, Andy Hurt
“We’re excited to be bringing together two established pioneers in audio and video technology to be moving forward and one business – Poly."
NVIDIA announces Jetson Nano: A US$99 tiny, yet mighty AI computer 
“Jetson Nano makes AI more accessible to everyone, and is supported by the same underlying architecture and software that powers the world's supercomputers.”
Unity and NVIDIA announce real-time ray tracing across industries
For situations that demand maximum photorealism and the highest visual fidelity, ray tracing provides reflections and accurate dynamic computations for global lighting.
Slack doubles down on enterprise key management
EKM adds an extra layer of protection so customers can share conversations, files, and data while still meeting their own risk mitigation requirements.
NVIDIA introduces a new breed of high-performance workstations
“Data science is one of the fastest growing fields of computer science and impacts every industry."
Apple says its new iMacs are "pretty freaking powerful"
The company has chosen the tagline “Pretty. Freaking powerful” as the tagline – and it’s not too hard to see why.