We worked with GMO GlobalSign for this cross sign because they operate one of the oldest root certificates in wide use today. The key was to find one that is already trusted by the devices we wanted to be able to validate our certificates.
Google Trust Services is already a publicly trusted CA that is operated to the highest standards and is in all major browser trust stores, so we already met the requirements for a cross-sign from another CA. The rules governing public CA operations require that the CA being cross-signed meet the same strict operational, technological, and audit criteria as the certificate authority providing this cross-sign. A cross-sign allows a certificate authority that is already trusted by a device to extend its device compatibility to another certificate authority. To ensure as many clients as possible continue to have secure connections when using Google Trust Services certificates, we needed to obtain a cross-sign. There are still a large number of active used devices that have not been updated with our root certificates. When we started on this journey, our goal was that within five years our root certificates would be embedded in enough devices that we could do a single transition to our long-term root certificates. The road to becoming a publicly trusted certificate authority is a long one - especially if the certificates you issue will be used by some of the most visited sites on the internet.
This is why a little over four years ago we created Google Trust Services-our publicly trusted Certificate Authority (CA). Encryption is a fundamental building block when you’re on a mission to organize the world’s information and make it universally accessible with strong security and privacy.
0 kommentar(er)
