Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Google restricting Symantec certificates

24 Mar 2017   #1

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
Google restricting Symantec certificates

Search giant Google and security firm Symantec have clashed over the way websites are kept secure.

Google claims Symantec has done a poor job of using standard tools, called certificates, that check the identity of thousands of websites.

It will change its Chrome browser to stop recognising some Symantec certificates, causing problems for people who visit sites using them.

Symantec said Google's claims were "exaggerated" and "irresponsible".

The row concerns identity checks known as "security certificates", which underlie the HTTPS system that ensures data is encrypted as it travels to and from a website..

Read more: Google and Symantec clash on website security checks - BBC News

My System SpecsSystem Spec
30 Mar 2017   #2

Win-7-Pro64bit 7-H-Prem-64bit

Symantec isn't that a fancy name for Norton and if so who actually uses them anymore
I thought my mom was their last user which I finally convinced her a couple months ago to not renew
Gave her a mbam pro license to use as well as another free antivirus
My System SpecsSystem Spec
09 Apr 2017   #3

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1

It seems this disagreement has been going on for almost a year; From google's project zero: June 28, 2016 How to Compromise the Enterprise Endpoint
Then a week later July 05, 2016 US-Cert released: Alert (TA16-187A) Symantec and Norton Security Products Contain Critical Vulnerabilities , and just recently March 24, 2017 Ars Technica released: Google takes Symantec to the woodshed for mis-issuing 30,000 HTTPS certs [updated] Along with torchwood's article it also seems the time has come for a gentle push to turn into a shove.

From torchwood's link:
Symantec said it had taken "extensive remediation measures" to improve the way it issued certificates and noted that many other certificate issuers had not gone as far.

It queried why it had been "singled out" by Google when other certificate issuers were also at fault.

"We are open to discussing the matter with Google in an effort to resolve the situation in the shared interests of our joint customers and partners," it concluded.
Something smells here, if this is going on for almost a year, why is Symantec acting so hurt?

My interest in all this is I have several sites that use Symantec certs and I'm going to have to "politely" inquire what they are doing to bolster their security. One site has an insecure (red 52%) from Calomel SSL Validation, and a 6.3 out of 10 result from Cipher suit. I know Firefox, my browser of choice, has been working on tightening its security, but so far hasn't acted as strongly as Chrome.

Firefox and Symantec certs
My System SpecsSystem Spec

09 Apr 2017   #4

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1

Check Firefox for suspicious stored certificates with Certificate Store Checker (RCC) available here:

Windows Apps by FS1 (RCC Link)

Note: This app is updated usually on a monthly basis when the developer has time. If you get a "database is out of date" error when launching then you need to check for or wait for a new version.

Works with default Firefox profile. For variants copy rcc.exe into folders along with cert8.db and nssckbi.dll from each Firefox variant into each RCC folder.
Google restricting Symantec certificates-certificate-store-checker.jpg
Also this addon might be of interest although it hasn't been updated for a while. It notifies on new certificates with options to reject or view details. Also any certificates stored by Certificate Patrol can be cleared.
Certificate Patrol - a psyced Firefox/Mozilla add-on
Google restricting Symantec certificates-certificatepatrol-cyberfox.jpg

My System SpecsSystem Spec
09 Apr 2017   #5

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1

Good 'ol Callender, thanks for the added info and links, I've been using Calomel and Cipher suit since I saw them in one of your posts a few years back. Good stuff!
My System SpecsSystem Spec
09 Apr 2017   #6

win 7 X64 Ultimate SP1

Google should know they have hacked and penetrated everyone and everything.
My System SpecsSystem Spec

 Google restricting Symantec certificates

Thread Tools

Similar help and support threads
Thread Forum
Google Chrome not recognizing certificates?
Hey guys, Just a small problem, just started happening today that i can recall but my chrome has stopped finding certificates and encrypting my internet use. It has a little black and white globe in the address bar, before the url, and I can no longer access the page menu on the right, it has...
Browsers & Mail

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:52.
Twitter Facebook