Google Chrome’s Decision to Distrust Entrust TLS Certificates: What You Need to Know

Why is This Happening?

In a recent announcement, Google revealed that starting November 1, 2024, the Chrome browser will no longer trust TLS certificates issued by Entrust. This decision has generated significant concern among website owners who rely on Entrust certificates to secure their sites. But what prompted Google to take this step?

1. Compliance and Security Concerns: Google has stringent security and compliance standards for the Certificate Authorities (CAs) it trusts. These standards ensure that the certificates issued are secure and reliable. Any CA that fails to meet these standards consistently may be distrusted.
2. Transparency Issues: Google values transparency in the certificate issuance process. If a CA like Entrust fails to maintain transparency in its operations, such as not disclosing all issued certificates or not participating in Certificate Transparency logs adequately, it can lose Google’s trust.
3. Past Incidents: Historical security incidents or non-compliance issues can also lead to a CA being distrusted. If Entrust has had any lapses in maintaining the integrity and security of its certificates, this could contribute to Google’s decision.

What Should You Do as a Website Owner?

If your website currently uses Entrust TLS certificates, it is crucial to take action before the November 1, 2024 deadline to ensure uninterrupted security and user trust. Here are the steps you should follow:

1. Assess Your Current Certificates: Identify all your Entrust certificates and their expiration dates. This will help you plan the transition effectively.
2. Choose a New CA: Consider switching to a different trusted CA. Research and compare other options to find the best fit for your needs. WebWorld.nu is one such alternative worth considering.
3. Replace Your Certificates: Purchase new TLS certificates from the chosen CA and install them on your servers. Make sure to do this well in advance of the deadline to avoid any downtime or trust issues.
4. Test Your Setup: After replacing your certificates, test your website thoroughly to ensure that everything works correctly and that there are no security warnings in browsers.
5. Update Documentation: Ensure all your internal documentation reflects the changes, including any automated processes that rely on certificate details.

Comparing Entrust and WebWorld SSL Certificates

When choosing a new CA, it’s important to compare options. Here’s a comparison between Entrust and WebWorld SSL certificates:

1. Reputation and Trust

• Entrust: Known for its long history in the industry and a strong focus on enterprise-level solutions. However, Google’s recent decision affects its reputation.
• WebWorld: A well-known and widely used CA, particularly among small to medium-sized businesses. Trusted by major browsers and platforms.

2. Pricing and Plans

• Entrust: Generally offers higher-priced certificates aimed at enterprises, with a range of advanced security features.
• WebWorld: Provides a variety of affordable plans suitable for different needs, from personal blogs to large enterprises. Often offers discounts and promotions.

3. Features and Options

• Entrust: Offers comprehensive solutions including multi-domain, wildcard, and extended validation (EV) certificates with robust support for enterprise environments.
• WebWorld: Also offers a wide range of certificates, including DV (Domain Validation), OV (Organization Validation), and EV options, along with features like wildcard and multi-domain certificates.

4. Customer Support

• Entrust: Provides extensive support options, including dedicated account managers for enterprise clients.
• WebWorld: Known for its 24/7 customer support via phone, chat, and email, which is highly accessible and user-friendly.

5. Ease of Use

• Entrust: May involve a more complex setup process suitable for large organizations with dedicated IT teams.
• WebWorld: User-friendly with straightforward installation processes, making it ideal for smaller businesses or those without extensive IT resources.

Conclusion

Google’s decision to distrust Entrust TLS certificates starting November 1, 2024, underscores the importance of maintaining high security and transparency standards. As a website owner, proactively transitioning to a trusted CA like WebWorld can help ensure your website remains secure and trusted by users. By understanding the reasons behind Google’s decision and taking timely action, you can safeguard your site’s security and maintain user confidence.