Symantec SSL certs total disavowal will happen with Chrome 70 in a few days https://www.theregister.co.uk/2018/10/09/chrome_70_symantec_cert_disavowal/ so that has me curious for Cloudflare Full SSL, if an origin server had Symantec SSL certs after October 16, 2018, could Cloudflare Full SSL continue to work or is Cloudflare rejecting Symantec SSL certs on origin servers too ?
I don’t have any Symantec SSL but was curious what happens in this case 
My assumption is that as long as you have set it to ‘Full SSL’, it will not have any effect. Full SSL also works with self-signed certificates.
Full SSL (Strict) will likely be affected as the issuing CA needs to be valid. I am also curious to know when that will happen.
On a side note, Mozilla just decided to delay distrust till later this year:
Yeah Full SSL Strict probably be affected.
Yeah so some sites will get some extra time
AFAIK the certs themselves haven’t been revoked so it should still work.
I would agree with you, Google is removing their CA from the embedded trust, but it isn’t actually (can’t physically) revoking them anywhere. It’s also confirmed by the fact that not all browser vendors are doing that…
Main concern is if it’s removed from the ca-certificates package in each linux distro. I imagine CF just pulls from that list of CA’s + the origin CA.
Yeah that was my thinking too
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.