Forum Discussion
Google Chrome limits the validity of SSL Certificates to one year
stesch79 These changes apply to certificates that are rooted to a public CA trust anchor. Certificates that are rooted to a private PKI CA (“locally-trusted anchor”) are not limited this way.
Microsoftstesch79 These changes apply to certificates that are rooted to a public CA trust anchor. Certificates that are rooted to a private PKI CA (“locally-trusted anchor”) are not limited this way.
Eric_LawrenceThanks for the link! That's reassuring!
But what about the validity check itself? I assume Edge Chromium will also implement that check sooner or later?
- Eric_LawrenceYes, for certificates that chain to public CAs, we will have the same check as Chrome, shipping in the same Stable version.
- And company internal CA‘s are not affected?
- Eric_Lawrence
ThiloLangbein - Certificates that are rooted to a private PKI CA (“locally-trusted anchor”, which is trusted only because the user or admin added it to the client) are not limited this way.
It is extremely rare for a company to have an internal CA that chains back to a publicly trusted root (although it is not impossible. Microsoft has such a CA, as does at least one of the major CA companies).
