SSL/TLS Reviews: July 2020

Interesting SSL/TLS reviews and discussions — recaps news, trends and opinions from the industry.

Entrust

• Why Google’s Verified Mark Certificates (VMC) pilot matters

CA Security Council

• One Year Certs

Verified Mark Certificates

• BIMI for Gmail: Google Makes Email Identity Indicators Part of Its New Security Updates

398-day Certificate Validity

• Mozilla and Reducing TLS Certificate Lifespans to 398 Days

Miss-issued OCSP-Signing Intermediates

• Revocation of Misissued OCSP-Signing Intermediates

DigiCert CA revocation

• DigiCert ICA Replacement
• Digicert will shovel some 50,000 EV HTTPS certificates into the furnace this Saturday after audit bungle

Bulletproof TLS Newsletter #67

• Intermediate certificates with OCSP capability cause trouble

Other News & Notes

• Naked Security reports on Firefox 78 is out – with a mysteriously empty list of security fixes
• Scott Helme discusses Finding alternate trust paths the easy way; Introducing Chain Builder