{"id":37745,"date":"2018-10-15T16:01:45","date_gmt":"2018-10-15T14:01:45","guid":{"rendered":"https:\/\/www.rudebaguette.com\/?p=37745"},"modified":"2019-04-26T18:30:27","modified_gmt":"2019-04-26T16:30:27","slug":"last-call-for-unsafe-websites-as-chrome-70-rolls-in","status":"publish","type":"post","link":"https:\/\/www.rudebaguette.com\/en\/2018\/10\/last-call-for-unsafe-websites-as-chrome-70-rolls-in\/","title":{"rendered":"Last call for “unsafe” websites as Chrome 70 rolls in"},"content":{"rendered":"
\"\"<\/div>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n
\n
Chrome 70, the updated web-browser from Google, is due out on October 16th. The websites lacking appropriate SSL certificates will display a <\/span>highly<\/span> deterring “unsafe” warning sign<\/span>. Thousands of websites are in cross-hairs.<\/strong><\/div>\n<\/div>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n

What’s an SSL certificate?<\/span><\/h2>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n
\n
You may have noticed some websites begin with http:\/\/ and some with https:\/\/. The extra “s” means it is secure and from tomorrow onwards will mean an awful lot to web users.<\/span><\/div>\n<\/div>\n
\n
An SSL certificate (Secure Socket Layer) is a way to establish an encrypted connection. Encrypted meaning secure and it is vital for online shopping. Would you send in your credit card numbers via an unsafe website?<\/span><\/div>\n<\/div>\n
\n
SSL certificates are temporary and need to <\/span>be renewed<\/span><\/span>. They <\/span>are issued by<\/span><\/span> various certificate providers. Some of which have proved, in the past, to be less reliable than others. One of them, in particular, is Symantec and its subsidiaries.<\/span><\/div>\n<\/div>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n

From padlock to a warning sign<\/span><\/h2>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n
\n
Depending on the web browser, you’ve already come across le padlock symbol. Sometimes open (unsafe) or close (safe), sometimes green (safe) or red (unsafe).<\/span><\/div>\n<\/div>\n
\n
With Google’s update of its star browser Chrome, last summer, warnings were not that subtle anymore<\/span><\/span>. <\/span>An ungracious “not secure” sign before the URL makes sure you think twice before entering the website if you noticed it<\/span><\/span>.<\/span><\/div>\n<\/div>\n
\n
After the October update, a massive warning sign will make you run away with a scream. It’s always possible to go past it but hardly recommended.<\/span><\/div>\n<\/div>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n

What is wrong with Symantec SSL certificates?<\/span><\/h2>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n
\n
Through various mishaps in the past, Symantec lost the trust of Google. It started back in 2015 with a batch of bad test certificates. <\/span>Symantec reiterated the following year and “issued 33 bad certificates” when Google counted 30,000<\/span><\/span>. From then on, Symantec certificates <\/span>were hunted<\/span><\/span> down by Google. <\/span>Tomorrow comes the final nail in the Symantec coffin and the websites hosting certificates from Equifax, GeoTrust, RapidSSL, Thawte, and VeriSign dating back to 2016<\/span><\/span>.<\/span><\/div>\n<\/div>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n

Brutal yet not unexpected<\/span><\/h2>\n
\n
\u00a0<\/span><\/div>\n<\/div>\n
\n
The method is brutal but not unexpected. The announcement setting the deadline this month dates back to a year ago. A year to comply and adopt another SSL certificate. Yet, about a thousand of the top million websites don’t comply. And many more that didn’t make it in the top million.<\/span><\/div>\n<\/div>\n
\n
Mozilla, the Firefox editor, will proceed the same way but has decided to give a little more time to users. Google will not. What about your website? Is it ready?<\/span><\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

\u00a0 Chrome 70, the updated web-browser from Google, is due out on October 16th. The websites lacking appropriate SSL certificates will display a highly deterring “unsafe” warning sign. Thousands of websites are in cross-hairs. \u00a0 \u00a0 What’s an SSL certificate? \u00a0 You may have noticed some websites begin with http:\/\/ and some with https:\/\/. The<\/p>\n","protected":false},"author":77,"featured_media":37746,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"subtitle":"","footnotes":""},"categories":[113],"tags":[],"class_list":["post-37745","post","type-post","status-publish","format-standard","has-post-thumbnail","category-finance"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/posts\/37745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/users\/77"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/comments?post=37745"}],"version-history":[{"count":0,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/posts\/37745\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/media\/37746"}],"wp:attachment":[{"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/media?parent=37745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/categories?post=37745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/tags?post=37745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}