In a significant move impacting website security and accessibility for many users, a major web browser is set to withdraw trust for digital certificates issued by specific authorities. Starting in August, certificates originating from Chunghwa Telecom and Netlock will no longer be considered valid or trusted.
This action is being taken because these Certificate Authorities (CAs) have not met the necessary security standards and policy requirements expected for issuing trusted web certificates. Browsers rely on CAs to rigorously verify website identities before issuing certificates that enable secure connections (HTTPS). When a CA fails to adhere to these standards, it undermines the integrity of the entire system designed to protect users online.
For website owners who currently use SSL/TLS certificates issued by either Chunghwa Telecom or Netlock, this change is critical. After the August deadline, visitors using the affected browser will encounter trust errors when attempting to access these sites. This will manifest as prominent security warnings, potentially preventing users from proceeding to the site or severely damaging user confidence and site reputation.
To avoid this outcome and ensure uninterrupted access and user trust, website operators must take immediate action. It is essential to acquire and install new fully trusted certificates from a compliant and recognized Certificate Authority before August. Migrating to a trusted CA is not only necessary for technical compatibility but is fundamental for maintaining website security, protecting user data through encryption, and preserving the online reputation and accessibility of the site. Relying on properly issued and trusted digital certificates is a cornerstone of a safe and effective online presence.
Source: https://www.bleepingcomputer.com/news/security/google-chrome-to-distrust-chunghwa-telecom-netlock-certificates-in-august/
