TLDR:
- Google to block websites using Entrust certificates starting in November 2024
- Entrust’s certificates are deemed untrustworthy due to compliance failures and security issues
Google has announced that it will be blocking websites that use certificates from Entrust in its Chrome browser, starting around November 1, 2024. This decision comes after Entrust’s repeated compliance failures and inability to address security issues in a timely manner, leading to a lack of confidence in their competence, reliability, and integrity as a certificate authority.
The blocking action will apply to Chrome browser versions 127 and above by default, but can be overridden by users and enterprise customers. Websites serving certificates from Entrust will display an interstitial message warning users of insecure connections. Website operators are urged to switch to a different certificate authority owner to avoid disruption.
Overall, the move by Google highlights the importance of certificate authorities in ensuring encrypted connections and the need for timely security measures in the internet ecosystem.