Summary
From the earliest days of computing, computer scientists have recognized the need for the secure transport of information. Early computer protocols like Telnet would broadcast information (like usernames and passwords) across the internet without encryption, making it visible to anyone who wanted to look. Those early protocols were replaced with more secure protocols that rely on public-key encryption to transport data, and a similar public-key encryption is what most websites today rely on to move your information securely between their servers and your browser.
Websites use digital certificates to validate their identity and provide public cryptography keys that your browser can use to establish a secure connection. But, your browser won't trust just any certificate. Instead, your browser has an internal list of trusted certificate issuers (they're usually called root stores, here's Chrome's root store) with which it will automatically establish a secure connection. Today, Google announced that it's kicking at least one certificate issuer off of that list.
Fit, durability, sound quality, and price matter
In a post released today on Google's Security Blog (spotted by 9to5Google), the company singles out the certification authority (CA) Entrust. It doesn't appear that Entrust has done just one thing to get on Google's naughty list, rather it's a pattern of behavior. To get on Google's nice list, CAs have to jump through more than a few hoops, and Google makes clear in its blog post that Entrust has "fallen short" of its expectations. Indeed, Google doesn't mince words when it says Entrust's actions have "eroded confidence in their competence, reliability, and integrity as a publicly-trusted CA Owner." Ouch.
The exile of Entrust from the annals of the elite CAs won't take place immediately. Rather, any Entrust certificate issued after October 31, 2024 will no longer be trusted by Chrome as a matter of course. That isn't to say that Chrome users will lose access to any sites that use certificates issued by Entrust, users will simply need to manually enable trust in Entrust, or wade through a warning screen when visiting a site that uses Entrust's certificates. These changes will affect all Chrome users except for iOS users.
You've probably come across a few certificate warnings on your browser if you've spent any time wandering the web. For the most part it's not a big deal if you go to one of these browser-designated "dangerous" sites, but you should be aware that these sites most likely aren't using encryption to move data between the server and the browser. That means if you use a username or password on one of these unsecured sites, someone could be listening in and taking that information from you. In other words, don't use any personal information on an unsecured site. Having an up-to-date certificate is also a sign of a website that takes itself and its security seriously.
How can an app send messages that only you can decode?
Given that any site using Entrust will now appear as untrustworthy, many big names on the internet are probably scrambling to change their certificate providers. Entrust is currently used by sites such as MoneyGram and the US Department of Energy, but unless Entrust can strike a deal with Google, it's almost a sure thing that they'll be switching providers. It's worth noting that Entrust is currently on Firefox's list of trusted CAs, but given that Chrome controls over 65% of the browser market, Firefox's opinion on Entrust isn't likely to move the needle.
We have reached out to Google, Entrust, and Mozilla for comment on this story and will update if they respond.
Read more:
Google Chrome will soon flag several websites for invalid certificates - Android Police
- Google Translate Adds 12 Minority Languages of Russia - The Moscow Times - June 29th, 2024 [June 29th, 2024]
- What's new in the June 2024 Google System Updates [U] - 9to5Google - June 29th, 2024 [June 29th, 2024]
- ICYMI: the week's 7 biggest tech stories from Google Pixel event details to a pair of new best Bluetooth speaker ... - TechRadar - June 29th, 2024 [June 29th, 2024]
- Google Translate just got its biggest update ever - Digital Trends - June 29th, 2024 [June 29th, 2024]
- Google Pixel 9 Pro Fold all the rumors so far - Tom's Guide - June 29th, 2024 [June 29th, 2024]
- Forget Duolingo Google Translate just got a massive AI upgrade that gives it over 100 new languages - TechRadar - June 29th, 2024 [June 29th, 2024]
- Stop Reading Google's Restaurant Reviews - Can We Please Stop Relying On Google and Yelp For Restaurant ... - Delish - June 29th, 2024 [June 29th, 2024]
- Google Pixel 9 Pro teased for first time in promo for Google's August Pixel event - TechRadar - June 29th, 2024 [June 29th, 2024]
- Foreign Ministry hails Google Translate's addition of Crimean Tatar language - Kyiv Independent - June 29th, 2024 [June 29th, 2024]
- Google touts enterprise-ready AI with more facts and less make-believe - The Verge - June 29th, 2024 [June 29th, 2024]
- Google announces early August 13 event for Pixel 9 and Pixel Watch 3 - 9to5Google - June 29th, 2024 [June 29th, 2024]
- Google Testing Facial Recognition-Based Security for Offices - PYMNTS.com - June 29th, 2024 [June 29th, 2024]
- I'm tired of overwhelming productivity apps, so I created this simple system instead - XDA Developers - June 29th, 2024 [June 29th, 2024]
- Google's E-E-A-T & The Myth Of The Perfect Ranking Signal - Search Engine Journal - June 29th, 2024 [June 29th, 2024]
- DC high school grad wins Doodle for Google contest with art inspired by her family's Sunday dinners - NBC Washington - June 29th, 2024 [June 29th, 2024]
- European Union's competition boss signals fresh AI scrutiny for Microsoft-OpenAI deal and Google - ABC News - June 29th, 2024 [June 29th, 2024]
- Google is cracking down on internet security in this big way - Digital Trends - June 29th, 2024 [June 29th, 2024]
- Bizarre half-cut tree from neighbor dispute becomes an unlikely tourist attraction thanks to Google reviews - New York Post - June 29th, 2024 [June 29th, 2024]
- Google improves search experience in the Chrome mobile app - TechCrunch - June 29th, 2024 [June 29th, 2024]
- Google TAG: New efforts to disrupt DRAGONBRIDGE spam activity - The Keyword | Google Product and Technology News - June 29th, 2024 [June 29th, 2024]
- Google Keep's strength lies in its simplicity - Android Police - June 29th, 2024 [June 29th, 2024]
- Top-secret US aquatic drone weapon 'Manta Ray' spotted on Google Maps for all to see - New York Post - June 29th, 2024 [June 29th, 2024]
- Google Wallet supports American Express as the end of Fitbit Pay looms - Android Central - June 29th, 2024 [June 29th, 2024]
- Should you buy the Google Pixel Fold, or wait for the Pixel Fold 2? - Android Police - June 29th, 2024 [June 29th, 2024]
- Google will address Android's Find My Device network issues over the coming weeks - The Verge - June 29th, 2024 [June 29th, 2024]
- PDF organizer Stack is the latest app to hit the Google graveyard - The Verge - June 29th, 2024 [June 29th, 2024]
- Google Keep now supports using two accounts side by side on Android tablets and foldables - PhoneArena - June 29th, 2024 [June 29th, 2024]
- Google Translate just nearly doubled its number of supported languages - Ars Technica - June 29th, 2024 [June 29th, 2024]
- Google says its latest Gemini AI is 20% faster than the newest ChatGPT - Quartz - June 29th, 2024 [June 29th, 2024]
- The Google One VPN service is heading to the Google graveyard - The Verge - April 16th, 2024 [April 16th, 2024]
- Google One is losing a lot of its appeal, but Photos has me locked in - Android Authority - April 16th, 2024 [April 16th, 2024]
- Google intensifies fight against YouTube adblockers - Ghacks - April 16th, 2024 [April 16th, 2024]
- Google One VPN Is Bound for the Google Graveyard Later This Year - CNET - April 16th, 2024 [April 16th, 2024]
- Google's next foldable could be the Pixel 9 Pro Fold and finally get flagship specs - TechRadar - April 16th, 2024 [April 16th, 2024]
- Meta and Google announce new in-house AI chips, creating a trillion-dollar question for Nvidia - Fortune - April 16th, 2024 [April 16th, 2024]
- Grow with Google launches a new generative AI course for educators in collaboration with MIT RAISE - The Keyword | Google Product and Technology News - April 16th, 2024 [April 16th, 2024]
- Google is shutting down Google One VPN because 'people simply weren't using it' - ZDNet - April 16th, 2024 [April 16th, 2024]
- Google's Pixel 8A leaks in all colors including a bold green - The Verge - April 16th, 2024 [April 16th, 2024]
- Milan Design Week 2024: Google and Chromasonic Transform Light Into Sound for Making Sense of Color Exhibition ... - Cool Hunting - April 16th, 2024 [April 16th, 2024]
- Something strange might happen to the Google Pixel Fold 2 - Digital Trends - April 16th, 2024 [April 16th, 2024]
- Google begins removing California news from search in response to Journalism Preservation Act - Sacramento Bee - April 16th, 2024 [April 16th, 2024]
- I tested the Google Pixel's Long Exposure photo mode and it's another reason to leave my pro mirrorless camera at ... - TechRadar - April 16th, 2024 [April 16th, 2024]
- iOS 18Apple Issues New Blow To Google With Bold AI Privacy Decision - Forbes - April 16th, 2024 [April 16th, 2024]
- Google Wallet 'verify it's you' request appears minutes after unlock - 9to5Google - April 16th, 2024 [April 16th, 2024]
- Google Will Open Its Magic Editor AI Photo Tools to Everyone for Free, With a Catch - CNET - April 16th, 2024 [April 16th, 2024]
- The Google Pixel 8a leaks twice, hinting at its design, and four color options - TechRadar - April 16th, 2024 [April 16th, 2024]
- Google Vids is Google's fourth big productivity app for Workspace - Ars Technica - April 16th, 2024 [April 16th, 2024]
- Google working to prevent accidental Circle to Search activations - 9to5Google - April 16th, 2024 [April 16th, 2024]
- Google Unleashes 'New Era Of Productivity' With AI Agents: Partners - CRN - April 16th, 2024 [April 16th, 2024]
- Did you even use the Google One VPN? [Poll] - 9to5Google - April 16th, 2024 [April 16th, 2024]
- Faced with possibly paying for news, Google removes links to California news sites for some users - ABC News - April 16th, 2024 [April 16th, 2024]
- Google Chrome removes side panel button in favor of pinning - 9to5Google - April 16th, 2024 [April 16th, 2024]
- Google and Chromasonic make sense of colour at Milan Design Week - Wallpaper* - April 16th, 2024 [April 16th, 2024]
- Google and MIT launch a free generative AI course for teachers - ZDNet - April 16th, 2024 [April 16th, 2024]
- The Google Pixel 7a is on sale for a new low of $349 - Engadget - April 16th, 2024 [April 16th, 2024]
- Here's how the Google Pixel 9's new modem will power satellite connectivity - Android Police - April 16th, 2024 [April 16th, 2024]
- Here's 16 pages of what Epic wants after winning its Google app store lawsuit - The Verge - April 16th, 2024 [April 16th, 2024]
- When Parkinson's anxiety, Google Maps, and texting collide - Parkinson's News Today - April 16th, 2024 [April 16th, 2024]
- Google Meet slides in time-saving UI update for its toolbar on desktop - Android Central - April 16th, 2024 [April 16th, 2024]
- Google AI podcast: 6 conversations with global leaders - The Keyword | Google Product and Technology News - April 12th, 2024 [April 12th, 2024]
- Nvidia, Google Expand Partnership With Nvidia Blackwell Coming to Google Cloud in 2025 - Investopedia - April 12th, 2024 [April 12th, 2024]
- Google partners with Bayer on new AI product for radiologists - CNBC - April 12th, 2024 [April 12th, 2024]
- Exclusive: Google Workers Revolt Over $1.2 Billion Israel Contract - TIME - April 12th, 2024 [April 12th, 2024]
- Google's new Arm-based CPU will challenge Microsoft and Amazon in the AI race - The Verge - April 12th, 2024 [April 12th, 2024]
- Google releases first Android 15 beta with improved performance and edge-to-edge display by default - SiliconANGLE News - April 12th, 2024 [April 12th, 2024]
- Google's Gemini 1.5 Pro can now hear - The Verge - April 12th, 2024 [April 12th, 2024]
- WPP and Google Cloud forge groundbreaking new collaboration to lead generative AI-driven marketing into its next ... - WPP - April 12th, 2024 [April 12th, 2024]
- These Google Photo Editing Tools Will Be Free Soon - Lifehacker - April 12th, 2024 [April 12th, 2024]
- I shot the eclipse with an iPhone 15 Pro Max, Google Pixel 8 Pro and a Samsung Galaxy S23 Ultra here's which one ... - TechRadar - April 12th, 2024 [April 12th, 2024]
- Responses To Google Search About Amarillo - 101.9 The Bull - April 12th, 2024 [April 12th, 2024]
- Google announces Axion, its first custom Arm-based data center processor - TechCrunch - April 12th, 2024 [April 12th, 2024]
- Google and world's largest ad group announce landmark AI collaboration - Search Engine Land - April 12th, 2024 [April 12th, 2024]
- Google releases 'prompting guide' with tips for Gemini in Workspace - 9to5Google - April 12th, 2024 [April 12th, 2024]
- Google Photos is making its AI photo editing tools available for all users - Mashable - April 12th, 2024 [April 12th, 2024]
- Orange Expands Partnership With Google Cloud to Use AI and GenAI Across Workstreams and Geographies With New ... - PR Newswire - April 12th, 2024 [April 12th, 2024]
- Google finally launches its Find My Device network. Here are the Android models that support it - ZDNet - April 12th, 2024 [April 12th, 2024]
- Google Store now accepts trade-ins for the Pixel Tablet - 9to5Google - April 12th, 2024 [April 12th, 2024]
- Google's Find My Device network has finally launched and the Pixel 8 gets special tracking powers - TechRadar - April 12th, 2024 [April 12th, 2024]
- Alphabet Stock Rises Amid Introduction of AI Products - PYMNTS.com - April 12th, 2024 [April 12th, 2024]
- Discover the Czech National Library's treasures with Google Arts & Culture - The Keyword | Google Product and Technology News - April 12th, 2024 [April 12th, 2024]