Symantec SSL certs total disavowal will happen with Chrome 70 in a few days https://www.theregister.co.uk/2018/10/09/chrome_70_symantec_cert_disavowal/ so that has me curious for Cloudflare Full SSL, if an origin server had Symantec SSL certs after October 16, 2018, could Cloudflare Full SSL continue to work or is Cloudflare rejecting Symantec SSL certs on origin servers too ?
I don’t have any Symantec SSL but was curious what happens in this case
I would agree with you, Google is removing their CA from the embedded trust, but it isn’t actually (can’t physically) revoking them anywhere. It’s also confirmed by the fact that not all browser vendors are doing that…