Skip to main content

Chrome 70 could break thousands of websites, but that’s their own fault

Image used with permission by copyright holder

As a result of using old security certificates, thousands of sites on the internet may stop working as soon as October 16. When Google begins rolling out its next version of the Chrome browser  — called Chrome 70 — users navigating to these sites will be greeted with a security warning once Google drops trust for HTTPS security certificates issued by Symantec prior to June 2016.

When Google discovered more than a year ago that Symantec had improperly issued security certificates, it warned that it will drop support for the affected batches of certificates from the security firm. In essence, security certificates issued by Symantec prior to June 2016 won’t be trusted by Chrome 70, and web developers had more than a year to prepare for the change. Security researcher Scott Helme found more than 1,000 sites in the top million websites ranked by Alexa that may be affected by the change once Google rolls out Chrome 70, including a few notable government sites from India and Tel Aviv. A few of the sites on Helme’s list recently changed to new certificates, so they won’t be affected.

In addition to Symantec certificates, users visiting websites using certificates issued by Thawte, VeriSign, Equifax, GeoTrust, and RapidSSL prior to June 2016 will also be greeted with a security warning on Chrome 70, TechCrunch reported.

Google also made recent headlines for some of its efforts in building trust on the internet. The company came under fire with the release of Chrome 69 for trying to hide the “www” portion of a web address in the Chrome omnibox. After users protested, Google reversed course, but it said that the change is still incoming once Chrome 70 launches. An even more radical change that Google is exploring includes killing web addresses altogether. Google hasn’t revealed what the alternative to URLs would be, but the company stated that this is an idea that it is still working on as part of its effort to help build a safer web experience.

Chrome 70 follows on the heels of Chrome’s major redesign with the launch of Chrome 69. The next version of Google’s web browser will introduce new features, such as shape detection and barcode scanning, Web Authentication support with biometric scanners on MacOS and Android where available, and Web Bluetooth support on Windows 10, Google announced. With Chrome 70, Google will also reverse its recent controversial decision to forcibly sign users into the browser once they log into a Google account on the web.

Editors' Recommendations

Chuong Nguyen
Silicon Valley-based technology reporter and Giants baseball fan who splits his time between Northern California and Southern…
Google Chrome is getting a complete overhaul for its birthday
Screenshot of Google Chrome with updated Material You design language.

To mark the 15th anniversary of its popular web browser, Google is releasing a brand new update for Chrome. The biggest change will be a redesign for the browser that will now adhere to Google’s Material You design language. There is also an update for the Chrome Web Store, alongside enhanced search features and some tweaks to Safe Browsing.

Material You is Google's unified design language, which was first introduced with Android 12. According to a blog post shared by Chrome Vice President Parisa Tabriz, Chrome will be the latest product from the company that will be getting a design overhaul featuring new icons that place a strong emphasis on legibility. On top of that, there will be fresh color palettes that will expand to the tabs and toolbar.

Read more
This Google Chrome feature may save you from malware
Google Chrome app on s8 screen.

There are probably hundreds of thousands of Google Chrome extensions out there, and with so many options to choose from, it can be hard to know whether the plugin you want to install is hiding malware nasties.

That could become a thing of the past, though, as Google is testing a feature that will warn you if an extension you installed has been removed from its Chrome Web Store.

Read more
Chrome has a security problem — here’s how Google is fixing it
Google Chrome icon in mac dock.

Google is looking to get ahead of high-severity vulnerabilities on its Chrome browser by shortening the time between security updates.

The brand hopes that more frequent updates will give bad actors less time to access and exploit n-day and zero-day flaws found within Chrome browser code.

Read more