Google slaps Symantec for sloppy certs, slow show of SNAFUs

Math error?

I may be wrong, but based on their 31-days-in-a-month calculations, should "5 months" equate to "155 days", and not "279 days" as shown in the table?

Ditto, "9 months" should be "279 days" and not "465 days" which in fact represent 15 months.

Here's the paragraph that will cost Symantec a lot of money:

"Given the nature of these issues, and the multiple failures of Symantec to ensure that the level of assurance provided by their certificates meets the requirements of the Baseline Requirements or Extended Validation Guidelines, we no longer have the confidence necessary in order to grant Symantec-issued certificates the “Extended Validation” status. As documented with both the current and past misissuance, Symantec failed to ensure that the organizational attributes, displayed within the address bar for such certificates, meet the level of quality and validation required for such display. Therefore, we propose to remove such indicators, effective immediately, until Symantec is able to demonstrate the level of sustained compliance necessary to grant such trust, which will be a period no less than a year. After such time has passed, we will consider requests from Symantec to re-evaluate this position, in collaboration with the broader Chromium community."

Did yo catch the "effective immediately" part?

The bank I work for has been reticent to leave Symantec because of old people afraid of change. Not any more. We're moving to replace every Symantec certificate we use because we rely on EV certs as part of our customer anti-phishing education campaign. And we just saved tens of thousands of dollars a year as well.

Symantec Sucks

One man's blog about Symantec's flagship product, NAV07. Hilariously bad software, traceable to excruciatingly bad management. Very well documented. It's a blog, so start at the bottom if you're interested.

Point is: Symantec's very bad management. That's unlikely to have changed much, even in a decade or so.

symantec-sucks.blogspot.com

i thought my employer's management were incompetent until they were acquired by SYMC. The levels of ignorance, incompetence, pathetic internal politicking and backstabbing, well mixed with a cascade of the most mind-blowingly, hilariously misjudged American management bullshit it's ever been my misfortune to read. I don't think I've ever been so glad to escape an employer.