Mozilla/Firefox planning on distrusting Symantec issued certificates

[universal4]

I noticed some issues rendering some pages in Firefox so I was checking the change log threads and stumbled on this:

In advance of removing all trust for Symantec-issued certificates in Firefox 63, a preference was added that allows users to distrust certificates issued by Symantec. To use this preference, go to about:config in the address bar and set the preference "security.pki.distrust_ca_policy" to 2.

https://www.mozilla.org/en-US/firefo.../releasenotes/

It seems a near future update will distrust all cert's issued by Symantec, so just in case anyone is using a cert issued by them you might want to redo the cert's.

Rick
Universal4

(font bolded by me to draw attention to pertinent information)

[PROFRBcom]

I don't see any reason listed as to why Firefox would stop trusting a well known company's certs?

[Muppet]

This has been going on for a few years already. The problem is that Symantec are a well known company that people trust, but their employees were not following proper process for verification of the identity of owners of sites they were issuing EV certs to. At one stage they issued an EV cert for google.com to an impersonator for example. Therefore their certificates are not considered trustworthy and it is a risk to your online safety for your browser to assume their certificates are legitimate.