Google introduced new security standards for HTTPS

26
Google introduced new security standards for HTTPS
The Chrome browser’s market share, over 66 percent, causes Google’s changes to have a general effect on the web ecosystem. In this context, Google has announced new security standards for HTTPS encryption providers. The company made two important security measures compulsory to ensure that TLS certificates more reliable and more resistant to cyber threats.

New Period in Web Security: MPIC and LİNting

Google’s new security measures developed within the scope of the Chrome Root program will make TLS encryption systems more robust, which form the basis of the HTTPS protocol. The two basic changes focused on the company are the automatic verification process called Multi-Perspective Issuance Corroboration and Linting.

Google says that the existing methods used to verify whether a web domain name really belongs to the owner is insufficient. In this process, MPIC brings additional controls and makes it difficult for malicious people to receive false certificates. Developed to detect errors in TLS certificates, Linting prevents the use of old or insecure technologies by determining encryption errors. Linting can be implemented by tools such as CERTLİNT, PKilint, X509lint and Zlint, open source projects.

Google’s suggestions were unanimously adopted by the CA/Browser Forum, which played an important role in web security. As of March 15, 2025, all certificate officials will have to use MPIC and Linting processes while giving new certificates.