#CertificateAuthorities

Google cuts ties with Entrust in Chrome over trust issues

by

June 28, 2024 at 10:36AM Google is ending its trust in Entrust due to a history of compliance and general improvement failures. From November 1 in Chrome 127, TLS server authentication certificates using Entrust or AffirmTrust roots won’t be trusted by default. This may require website owners to choose a new CA owner to avoid … Read more

Microsoft kills off Windows app installation from the web, again

by

January 3, 2024 at 07:07PM Microsoft disabled the ms-appinstaller URI scheme due to its misuse by threat actors to install malware. The scheme was re-enabled on August 5, 2022, for some enterprise customers. However, its abuse allowed bypassing of Microsoft’s security checks. Microsoft is revoking abused code signing certificates and advising updates and policy changes … Read more