Google Chrome to Revoke Trust for Chunghwa Telecom and Netlock Certificates by August

TL;DR

Starting in August, Google Chrome will no longer trust root CA certificates issued by Chunghwa Telecom and Netlock due to repeated compliance failures and lack of improvements. This move aims to enhance digital security and maintain trust in the Chrome Root Store.

Google Chrome to Revoke Trust for Chunghwa Telecom and Netlock Certificates

Google has announced that it will stop trusting root Certificate Authority (CA) certificates issued by Chunghwa Telecom and Netlock in the Chrome Root Store. This decision comes after a pattern of compliance failures and the companies’ inability to make necessary improvements.

Reasons for Distrust

The decision to distrust these certificates stems from several key issues:

• Compliance Failures: Both Chunghwa Telecom and Netlock have consistently failed to meet the required compliance standards.
• Lack of Improvements: Despite multiple opportunities, these companies have not implemented the necessary improvements to address the compliance issues.

Impact on Digital Security

This move by Google is part of a broader effort to maintain the integrity and security of the Chrome Root Store. By distrusting these certificates, Google aims to:

• Enhance Security: Ensure that certificates used in Chrome meet the highest security standards.
• Maintain Trust: Build and maintain user trust in the digital certificates used by Chrome.

What This Means for Users

For end-users, this change means that websites using certificates issued by Chunghwa Telecom and Netlock may face trust issues in Google Chrome. Users might encounter security warnings when visiting such sites, prompting them to reconsider their trust in these certificates.

Conclusion

Google’s decision to distrust certificates from Chunghwa Telecom and Netlock is a significant step towards enhancing digital security. By ensuring that only compliant and trustworthy certificates are used, Google aims to protect users from potential security risks. This move sets a precedent for other certificate authorities to adhere to strict compliance standards, fostering a safer digital environment.

For more details, visit the full article: source