Chris Byrne, an information security consultant and instructor for Cloud Harmonics, published a post to Facebook outlining a serious problem with the processes and third-party API used to deliver and manage Symantec SSL certificates. If exploited, the flaws would allow an attacker access to public and private keys, as well as the ability to reissue or revoke certificates. Google disclosed last week that they would deprecate and remove trust in the certificates, which is part of the reason why Byrne’s discovery is just now coming to light.”]

