UPDATE - Research Conducted by Comodo CA Reveals that more than One Million Distrusted Website Certificates from Symantec Remain in Use

World News: . []

ROSELAND, N.J., May 16, 2018 (GLOBE NEWSWIRE) -- , a worldwide leader in digital identity solutions, today revealed research results that identified more than one million websites using digital SSL/TLS certificates issued by Symantec Corp. now owned by DigiCert, Inc. that may be at risk. Using a two-step process, which included scanning publicly-available, Comodo CA-owned certification transparency log monitor and search tool () and further verifying via manual reviews of websites believed to be at risk of decertification, Comodo CA found more than one million website certificates worldwide that may be distrusted and will therefore have to be replaced to avoid disruption to the website, creating a significant business continuity and security issues for businesses and their customers. Failure to replace these certificates will result in site breakage in upcoming versions of major browsers, including Google Chrome and Mozilla Firefox.

“To help businesses and website owners worldwide ensure their sites remain trusted, Comodo CA has been carefully reviewing the universe of digital certificates to determine the scale and scope of distrusted certificates that still exist and help those affected to take swift and appropriate action,” said Bill Holtz, CEO, Comodo CA.  “While we were surprised by these findings, we felt it was critical to responsibly provide this information to help educate businesses and restore global trust and confidence in digital certificates, given their importance in areas such as e-commerce, global communication and the operation of IoT networks.”

“These efforts by Comodo CA demonstrate they’ve taken a leadership position in presenting some very real industry challenges,” said Robert Westervelt, Research Director, IDC Data Security Practice. “These findings are both interesting and a bit troubling.  The fact that we are still seeing more than a million distrusted certificates that are operational as of today, constitutes a big risk, particularly because remediation of the distrusted DigiCert certificates is a labor- and time-intensive process.  Also, release dates of major browser enhancements will be here very soon and this dynamic creates a major risk for enterprises globally and they need to be made aware of it. Otherwise, the financial impact could be significant if consumers cannot trust that websites are safe.”

Last year, Google, Inc., its Chrome team and the PKI community developed a plan to reduce and ultimately remove trust in certificates issued by Symantec, which are now owned by DigiCert. Google that as of July 20, 2018, end users will see certificate error messages on websites that have not replaced these certificates. Additionally, Google has said that as of October 23, 2018, certificates issued by Symantec and now owned by DigiCert before December 01, 2017 will be distrusted and no longer considered valid.

The findings of this testing demonstrate that the unreplaced certificates are a global issue. Of the one million websites still at risk, roughly 25 percent were based in Germany; 15 percent in the United States; 13 percent in the UK; 5 percent in China; 6 percent in Japan with several other countries at 5 percent and below.

Comodo CA released these results to help raise awareness of this issue to businesses, website operators, resellers and consumers worldwide. 

Contact:
Loren Guertin/Jenna Buraczenski
Matter Communications
lguertin@matternow.com
401-351-9504
Jburaczenski@matternow.com
401-351-9509

More news and information about Comodo CA

Published By:

Globe Newswire: 17:00 GMT Wednesday 16th May 2018

Published: .

Search for other references to "update" on SPi News


Previous StoryNext Story

SPi News is published by Sector Publishing Intelligence Ltd.
© Sector Publishing Intelligence Ltd 2018. [Admin Only]
 
Sector Publishing Intelligence Ltd.
Ground Floor Offices, Little Keep Gate, Barrack Road, Dorchester, Dorset DT1 1AH
Registered in England and Wales number 0751938.
 
Privacy Policy | Terms and Conditions | Contact Us
 

Advertising on SPi News: Information For Advertisers