Chrome to have its own dedicated certificate root store

[silversurfer]

Currently, Chrome uses the certificate root store part of each operating system. Google plans to manage its own list of "approved" certificates from now on, similar to Firefox.

Google has announced plans to run its own certificate root program/store for Chrome, in a major architectural shift for the company's web browser program.

A "root program" or a "root store" is a list of root certificates that operating systems and applications use to verify the identity of a software program during its installation routine.

Browsers like Chrome use root stores to check the validity of an HTTPS connection. They do this by looking at the website's SSL certificate and checking if the root certificate that was used to generate the SSL cert is included in the local root program/store.

Read more below::

Chrome will soon have its own dedicated certificate root store - ZDNET

Currently, Chrome uses the certificate root store part of each operating system. Google plans to manage its own list of "approved" certificates from now on, similar to Firefox.

www.zdnet.com

 

[SeriousHoax]

This is good for security. Firefox had this for years and it was troubling for AVs to enable HTTPS scanning automatically on Firefox. But last year I think, after so many complaints they created an option for making Firefox use Windows Certificate store under a certain method. Now it would be interesting to see how Chrome manage this dilemma.

 

[ForgottenSeer 85179]

I see potential here. If Google restrict/ isolate their own store in browser and use verification that would be another good step for security.
That would mean no "security" tool or malware can modify certs.

 

[Gandalf_The_Grey]

Google has selected a number of Certification Authorities for inclusion in the Transitional Root Store. Some of these were picked based on their reliability and performance in the past to promote "interoperability on different devices and platforms" and to minimize compatibility issues.

Google used public and verified information, such as information from Mozilla's Common CA Certificate Database, to verify Certification Authorities.

Certification Authorities that have not been selected by Google may request inclusion by following a procedure outlined on this page on the Google website.

Google Chrome will use its own Root Store in the future - gHacks Tech News

Google plans to transition from using the operating system's Root Store to the Chrome Root Store, that is maintained by Google and included in the Chrome browser.

www.ghacks.net

 

[Ink]

What are the benefits of this? How does this affect end users?

 

[bayasdev]

How does this affect end users?

most AVs MITM will stop working when it gets launched until AV vendors release updates like they did with FF but Mozilla also collaborated with them adding the enterprise roots flag.