### **Background:**
In an effort to enhance user security and privacy, Google Chrome will discontinue support for Entrust certificates on November 1, 2024. This decision was made due to Entrust’s recent involvement in issuing unauthorized certificates for sensitive domains.
### **Impact on Chrome Users:**
After November 1, 2024, Chrome users will experience the following consequences:
– Websites using Entrust certificates will display errors or security warnings.
– Users may be unable to access or use services that rely on Entrust certificates.
### **Recommended Actions:**
To ensure a seamless transition, website owners and IT administrators should take the following steps:
– **Check for Entrust Certificates:** Determine if any websites or services rely on Entrust certificates.
– **Obtain Alternative Certificates:** Replace Entrust certificates with certificates from a trusted Certificate Authority (CA).
– **Retest Applications:** Verify that applications and services function properly with the new certificates.
### **Timeline:**
– **Immediate:** Start planning and assessing the impact on your infrastructure.
– **Before November 1, 2024:** Obtain and install alternative certificates.
– **November 1, 2024:** Chrome discontinues support for Entrust certificates.
### **Technical Implications:**
Entrust certificates use the RSA algorithm, which is less secure than newer algorithms such as ECDSA or Ed25519. Chrome’s decision aligns with industry best practices and cryptography standards.
### **Conclusion:**
The discontinuation of Entrust certificate support in Chrome is a significant step toward improving user security. By replacing Entrust certificates with alternative solutions, website owners and IT administrators can maintain the integrity and reliability of their online presence.
**Affected Websites:**
- Websites that have not already switched to a different CA
- Websites that are still using Entrust certificates that were issued before November 2020
**Affected Services:**
- Remote access services
- Online banking services
- E-commerce websites
Kind regards
M. Martin
Information Security News & Trends
