Mozilla Follows Google in Losing Trust in Entrust's TLS Certificates
Mozilla is following in Google Chrome's footsteps in officially distrusting Entrust as a root certificate authority (CA) following what it says was a protracted period of compliance failures. From a report: A little over a month ago, Google was the first to make the bold step of dropping Entrust as a CA, saying it noted a "pattern of concerning behaviors" from the company. Entrust has apologized to Google, Mozilla, and the wider web community, outlining its plans to regain the trust of browsers, but these appear to be unsatisfactory to both Google and Mozilla.
In an email shared by Mozilla's Ben Wilson on Wednesday, the root store manager said the decision wasn't taken lightly, but equally Entrust's response to Mozilla's concerns didn't inspire confidence that the situation would materially change for the better. "Mozilla previously requested that Entrust provide a detailed report on these recent incidents and their root causes, an evaluation of Entrust's recent actions in light of their previous commitments given in the aftermath of similarly serious incidents in 2020, and a proposal for how Entrust will re-establish Mozilla's and the community's trust," said Wilson.
<a href="http://twitter.com/home?status=Mozilla+Follows+Google+in+Losing+Trust+in+Entrust's+TLS+Certificates%3A+https%3A%2F%2Ftech.slashdot.org%2Fstory%2F24%2F08%2F01%2F1336204%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"; rel="nofollow"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>;
<a href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Ftech.slashdot.org%2Fstory%2F24%2F08%2F01%2F1336204%2Fmozilla-follows-google-in-losing-trust-in-entrusts-tls-certificates%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"; rel="nofollow"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>;
https://tech.slashdot.org/story/24/08/01/1336204/mozilla-follows-google-in-losing-trust-in-entrusts-tls-certificates?utm_source=rss1.0moreanon&utm_medium=feed
at Slashdot.
https://tech.slashdot.org/story/24/08/01/1336204/mozilla-follows-google-in-losing-trust-in-entrusts-tls-certificates?utm_source=rss1.0mainlinkanon&utm_medium=feed
Slashdot (RSS Feed) /
npub1rk…d8w8z
2024-08-01 14:40:00
![https://a.fsdn.com/sd/twitter_icon_large.png"></a>](https://a.fsdn.com/sd/twitter_icon_large.png"></a>){kind=link}
![https://a.fsdn.com/sd/facebook_icon_large.png"></a>](https://a.fsdn.com/sd/facebook_icon_large.png"></a>){kind=link}
Author Public Key
npub1rk3j5fc4ew5w9zd7kx5zfqt04tew0kan9swrr63ctn6k8wp8f65qwd8w8zPublished at
2024-08-01 14:40:00Event JSON
{
"id": "f666946c0d9afc805dafaf1df2b5169a9b713bcc3bc272c5207d28fec4ee926a",
"pubkey": "1da32a2715cba8e289beb1a824816faaf2e7dbb32c1c31ea385cf563b8274ea8",
"created_at": 1722523200,
"kind": 1,
"tags": [
[
"t",
"mozilla"
],
[
"proxy",
"http://rss.slashdot.org/Slashdot/slashdot#https%3A%2F%2Ftech.slashdot.org%2Fstory%2F24%2F08%2F01%2F1336204%2Fmozilla-follows-google-in-losing-trust-in-entrusts-tls-certificates%3Futm_source%3Drss1.0mainlinkanon%26utm_medium%3Dfeed",
"rss"
]
],
"content": "Mozilla Follows Google in Losing Trust in Entrust's TLS Certificates\n\nMozilla is following in Google Chrome's footsteps in officially distrusting Entrust as a root certificate authority (CA) following what it says was a protracted period of compliance failures. From a report: A little over a month ago, Google was the first to make the bold step of dropping Entrust as a CA, saying it noted a \"pattern of concerning behaviors\" from the company. Entrust has apologized to Google, Mozilla, and the wider web community, outlining its plans to regain the trust of browsers, but these appear to be unsatisfactory to both Google and Mozilla. \n\nIn an email shared by Mozilla's Ben Wilson on Wednesday, the root store manager said the decision wasn't taken lightly, but equally Entrust's response to Mozilla's concerns didn't inspire confidence that the situation would materially change for the better. \"Mozilla previously requested that Entrust provide a detailed report on these recent incidents and their root causes, an evaluation of Entrust's recent actions in light of their previous commitments given in the aftermath of similarly serious incidents in 2020, and a proposal for how Entrust will re-establish Mozilla's and the community's trust,\" said Wilson.\n\u003ca href=\"http://twitter.com/home?status=Mozilla+Follows+Google+in+Losing+Trust+in+Entrust's+TLS+Certificates%3A+https%3A%2F%2Ftech.slashdot.org%2Fstory%2F24%2F08%2F01%2F1336204%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter\" rel=\"nofollow\"\u003e\u003cimg src=\"https://a.fsdn.com/sd/twitter_icon_large.png\"\u003e\u003c/a\u003e\n\u003ca href=\"http://www.facebook.com/sharer.php?u=https%3A%2F%2Ftech.slashdot.org%2Fstory%2F24%2F08%2F01%2F1336204%2Fmozilla-follows-google-in-losing-trust-in-entrusts-tls-certificates%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook\" rel=\"nofollow\"\u003e\u003cimg src=\"https://a.fsdn.com/sd/facebook_icon_large.png\"\u003e\u003c/a\u003e\n\n\n\nhttps://tech.slashdot.org/story/24/08/01/1336204/mozilla-follows-google-in-losing-trust-in-entrusts-tls-certificates?utm_source=rss1.0moreanon\u0026utm_medium=feed\n at Slashdot.\n\nhttps://tech.slashdot.org/story/24/08/01/1336204/mozilla-follows-google-in-losing-trust-in-entrusts-tls-certificates?utm_source=rss1.0mainlinkanon\u0026utm_medium=feed",
"sig": "f5664f51fdf8447a4eb1cedb18a7974f63a7730d53d2eae80ea758c5321491c624afbf140cae1d10a6751f3c5010626cca4bcd2367f88093836dd5217292e720"
}