News

Google Chrome developers have announced blocking of ‘mixed content downloads’ (when files on HTTP links are downloaded on HTTPS pages). This step is in line with Chrome’s earlier approach, blocking all non-secure resources on HTTPS pages.

The CA / B Forum, the official regulator of the SSL certificate industry, has adopted a new ballot, SC27v3, which explains the rules for issuing certificates for version 3 onion addresses.

Apple has announced that only certificates with a validity period of 398 days or less (1 year + additional renewal period) will be trusted by Safari. This policy shall enter into force on 1 September 2020.

The CA/B Forum, the regulator in the SSL certificate industry, adopted Ballot SC25 by a majority vote. This ballot defines methods for HTTP domain validation. According to the new requirement, method 6 (3.2.2.4.6) from the document “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” is considered to be discontinued.

Recently, Microsoft announced that the procedure for checking x.509 certificates based on ECC in Windows® contains a critical vulnerability. Patches have been released for all supported versions of Windows®.