Chrome is supposed to validate certificates itself in the future and wants to create even more security for users. To this end, Google is working on a root store. So far, the browser relies on the respective operating system to verify HTTPS connections.

Don’t miss any news! With our daily newsletter you will receive all the news from heise online from the past 24 hours every morning.

The “Chrome Root Program” can be found in the Chromium projects. Information about the time of the change is not yet available. However, guidelines and requirements for certification authorities have already been described so that they can prepare a smooth transition.

Root stores verify the validity of certificates . When an encrypted HTTPS connection is established, a check is made as to whether the certificate of a site has been authenticated by a certificate contained in the root store. This is to rule out man-in-the-middle attacks.

Exception iOS So far, Chrome has used the root store of the operating system, ie the “Microsoft Trusted Root Program” for Windows and the “Apple Root” for MacOS Certificate Program “. The only exception should be iOS in the future, Chrome will not use its own root store there. Mozilla has also had its own root store for Firefox from the start. For administrators who maintain lists for companies, for example, the change means additional work.

(emw)