from Hacker News

DigiCert to Acquire Symantec’s Website Security and Related PKI Solutions

by andygambles on 8/2/17, 8:54 PM with 52 comments

• by tptacek on 8/2/17, 9:25 PM

  Presumably the idea here is that DigiCert is buying Symantec's customer database, and instead of Symantec painstakingly transferring its users to a new, trustworthy certificate issuance system, everyone will just use DigiCert's.

  Which, if that's the case, will mean Google and Mozilla more or less killed the web's largest CA.

• by michaelbuckbee on 8/2/17, 9:17 PM

  I'm a reseller for Digicert - they just sent an announcement email about this, here's the most interesting bit:

  "Earlier this year, the browsers proposed a plan to limit trust in Symantec certificates after discovering issues with how they were validating and issuing digital certificates. Importantly, we feel confident that this agreement will satisfy the needs of the browser community.

  DigiCert is communicating this deal and its intentions to the browser community and will continue to work closely with them during the period leading up to our closing the transaction. DigiCert appreciates and shares the browsers’ commitment to engendering trust in digital certificates and protecting all users. "

• by huhtenberg on 8/2/17, 9:23 PM

  From the email announcement:

    ... snip ...
  

  Also, some of you may be wondering about any implications our announced acquisition will have on the ongoing debate between Symantec and the browser community about trust in their certificates.

  Earlier this year, the browsers proposed a plan to limit trust in Symantec certificates after discovering issues with how they were validating and issuing digital certificates. Importantly, we feel confident that this agreement will satisfy the needs of the browser community. DigiCert is communicating this deal and its intentions to the browser community and will continue to work closely with them during the period leading up to our closing the transaction. DigiCert appreciates and shares the browsers’ commitment to engendering trust in digital certificates and protecting all users.

    ... snip ...

• by rietta on 8/2/17, 9:21 PM

  How is Symantec's cert business not a toxic asset given their historical practices?

• by mw6621 on 8/2/17, 9:12 PM

  "Under the terms of the agreement, Symantec will receive approximately $950 million in upfront cash proceeds and approximately a 30 percent stake in the common stock equity of the DigiCert business at the closing of the transaction."

• by yuhong on 8/3/17, 1:48 AM

  In any case, I wonder if Google "senior executives" are really involved.

• by packetized on 8/2/17, 9:25 PM

  Make no mistake, this is going to be an even greater period of uncertainty for current SYMC CA customers over the next six to twelve months.

• by pastyboy on 8/2/17, 8:59 PM

  Eh ? About to be untrusted by google... interesting time to sell it.