Symantec Sells Digital Certificate Business to DigiCert

$950 million deal comes in the wake of Google sanctions on Symantec certs earlier this year.

Symantec will sell its SSL business to DigiCert for $950 million in a move that lets the security vendor avoid the need to entirely rebuild its digital certificate issuance infrastructure following a series of punitive actions by Google earlier this year.
Under terms of the sale announced this week, in addition to the upfront cash, Symantec will also receive a 30% stake in the common stock of DigiCert.
In a prepared
statement
, Symantec CEO Greg Clark said the proposed sale would sharpen the companys focus on cloud security. Symantec customers meanwhile will benefit from having a company that offers a modern website PKI platform to handle their digital certificate requirements going forward, he said.
Symantecs board has approved the transaction, which is expected to formally close in the third quarter of fiscal 2018.
The proposed sale makes sense for Symantec and is consistent with the general direction in which the company has been heading recently, says Garrett Bekker, principal security analyst at 451 Research.
Symantec has spent about $7.5 billion on acquisitions since they got rid of Veritas, and began to focus purely on the cybersecurity market, he says. They are certainly trying to rationalize their portfolio and get rid of non-core assets.
The plan especially makes sense for Symantec considering the pressure it has been under from Google in recent months, Bekker says.
He was referring to a Google
decision
from earlier this year to gradually deprecate all Symantec issued digital certificates over the next several months. Google described the decision as being driven by multiple failures on Symantecs part to properly validate its digital certificates before issuance.
Google said that an investigation it conducted showed that Symantec had allowed at least four parties to access its infrastructure and issue certificates with none of the required checks and balances. Google claimed that an inquiry that began with a set of 127 Symantec issued certificates expanded to over 30,000 suspect certificates over multiple years.
Symantecs failure to properly oversee the issuance of these certificates represented a failure by the company to adhere to the standards expected of a Certificate Authority and posed a threat to Google Chrome users, Google claimed. As a result, Chrome would, in a phased manner stop trusting all existing Symantec-issued certificates Google said. Going forward, Symantec would need to replace the certificates with new fully validated ones, Google had said.
Symantec itself
characterized
Googles claims and misleading and grossly exaggerated. The company claimed that only 127 certificates were identified as mis-issued and not 30,000. Symantec said that Google was singling it out for blame though the mis-issuance involved multiple CAs.
Selling off the certificate business means that Symantec no longer will need to contend with the issue. But questions about how the certificate infrastructure will evolve if the merger goes through should be uppermost in the minds of customers and partners, says Michael Fowler, president of DigiCert rival Comodo CA. What still remains to be determined for Symantec customers is how the sale will impact Googles decision to deprecate all existing Symantec SSL certificates starting October 2018, he says.
Given the problems that Google has identified with Symantecs infrastructure it is unlikely that DigiCert will use it going forward, Fowler speculates. But DigiCert, as a smaller vendor in this space, does not have the same infrastructure as Symantec, which could be problematic for Symantecs enterprise customers and channel partners, he claims.
Bekker though sees little to no complication for Symantecs customers. I dont think [the proposed sale] will have much of an impact at all, he says.
Symantecs certificate business will immediately increase DigiCerts market share and make the company one of the biggest players in the PKI and SSL markets, Bekker says. This will make DigiCert pretty much one of the leaders in terms of revenues, in the digital certificate business.
Related content
Symantec to Buy Browser Isolation Firm Fireglass
CAs Need To Force Rules Around Trust
Digital Certificate Security Fail
8 Alternatives to Selfie Authentication

Last News
▸ Researchers create BlackForest to gather, link threat data. ◂ Discovered: 23/12/2024 Category: security	▸ Travel agency fined £150,000 for breaking Data Protection Act. ◂ Discovered: 23/12/2024 Category: security	▸ 7 arrested, 3 more charged in StubHub cyber fraud ring. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Symantec Sells Digital Certificate Business to DigiCert