I reviewed the headers of my IT Security News website https://www.itsecuritynews.info/ in order to add HSTS. This is what I can see in the headers.
The certificate used to load https://www.itsecuritynews.info/ uses
an SSL certificate that will be distrusted in an upcoming release of Chrome.
Once distrusted, users will be prevented from loading this resource.
See https://g.co/chrome/symantecpkicerts for more information.
Source: https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html
Checking the article, I see some disturbing news:
Information For Site Operators
Starting with Chrome 66, Chrome will remove trust in Symantec-issued certificates issued prior to June 1, 2016. Chrome 66 is currently scheduled to be released to Chrome Beta users on March 15, 2018 and to Chrome Stable users around April 17, 2018.
If you are a site operator with a certificate issued by a Symantec CA prior to June 1, 2016, then prior to the release of Chrome 66, you will need to replace the existing certificate with a new certificate from any Certificate Authority trusted by Chrome.
Additionally, by December 1, 2017, Symantec will transition issuance and operation of publicly-trusted certificates to DigiCert infrastructure, and certificates issued from the old Symantec infrastructure after this date will not be trusted in Chrome.
Strato Germany
If you’re a client of Strato, you will have this problem.
At the time of writing this article, you see in the headers the above text.
I contacted Strato and asked them when they plan to replace the certs.
© Copyright 2017 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca on Cybersecurity
Check www.endpoint-cybersecurity.com for seeing the consulting services we offer.
Visit www.itsecuritynews.info for latest security news in English
Besuchen Sie de.itsecuritynews.info für IT Sicherheits News auf Deutsch
You must be logged in to post a comment.