The latest version of Google\u2019s snack-food-named mobile OS was released this week (on August 21st).<\/p>\n
While most Android users are excited about new emojis, picture-in-picture app support, and better performance, I bet you can guess what we are most excited about. That\u2019s right, root certificate changes!<\/p>\n
With this release, six roots were added and six were also removed – leaving the total number of trusted roots at 155. The most notable additions were four root certificates for Amazon\u2019s new CA.<\/span>.<\/p>\n Android 8.0 also removes support for SSL 3.0<\/a>, an aging version of the protocol which \u2018killed\u2019 three years ago by the POODLE vulnerability<\/a>.<\/p>\n Note that the Starfield Class 2 Certification Authority root<\/a>, which was previously owned by GoDaddy, was sold to and has been operated by Amazon since June 10th, 2015<\/a>. This root has been trusted on Android for many versions. Amazon\u2019s roots are cross-signed by this root certificate to enable trust on older devices.<\/p>\n Amazon\u2019s CA Now Trusted By Android; 155 Trusted Roots in Total The latest version of Google\u2019s snack-food-named mobile OS was released this week (on August 21st). While most Android users…<\/p>\n","protected":false},"author":2,"featured_media":4665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[130],"tags":[200,3784],"class_list":["post-4663","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-everything-encryption","tag-android","tag-trusted-roots","post-with-tags"],"views":20363,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2017\/08\/iStock-458108827.jpg","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/4663","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=4663"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/4663\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/4665"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=4663"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=4663"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=4663"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Roots Added<\/h2>\n
\n\n
\n Root Name<\/td>\n Owner<\/td>\n Key<\/td>\n Signature<\/td>\n Expires<\/td>\n<\/tr>\n \n Amazon Root CA 1<\/a><\/td>\n Amazon<\/td>\n RSA 2048-bit<\/td>\n SHA-256<\/td>\n Jan 17, 2038<\/td>\n<\/tr>\n \n Amazon Root CA 2<\/a><\/td>\n Amazon<\/td>\n RSA 4096-bit<\/td>\n SHA-384<\/td>\n May 26, 2040<\/td>\n<\/tr>\n \n Amazon Root CA 3<\/a><\/td>\n Amazon<\/td>\n ECC 256-bit<\/td>\n ECDSA SHA-256<\/td>\n May 26, 2040<\/td>\n<\/tr>\n \n Amazon Root CA 4<\/a><\/td>\n Amazon<\/td>\n ECC 384-bit<\/td>\n ECDSA SHA-384<\/td>\n May 26, 2040<\/td>\n<\/tr>\n \n LuxTrust Global Root 2<\/a><\/td>\n LuxTrust<\/td>\n RSA 4096-bit<\/td>\n SHA-256<\/td>\n Mar 5, 2035<\/td>\n<\/tr>\n \n AC RAIZ FNMT-RCM<\/a><\/td>\n Government of Spain, F\u00e1brica Nacional de Moneda y Timbre (FNMT)<\/td>\n RSA 4096-bit<\/td>\n SHA-256<\/td>\n Dec 31, 2029<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Roots Removed<\/h2>\n
\n\n
\n Root Name<\/td>\n Owner<\/td>\n Reason for Removal<\/td>\n Expires<\/td>\n<\/tr>\n \n Buypass Class 2 CA 1<\/a><\/td>\n Buypass<\/td>\n Expired<\/td>\n Oct 13, 2016<\/td>\n<\/tr>\n \n Juur-SK<\/a><\/td>\n AS Sertifitseerimiskeskuse (SK)<\/td>\n Expired<\/td>\n Aug 26, 2016<\/td>\n<\/tr>\n \n EBG Elektronik Sertifika Hizmet Sa\u011flay\u0131c\u0131s\u0131<\/a><\/td>\n E-Tugra<\/td>\n Expired<\/td>\n Aug 14, 2016<\/td>\n<\/tr>\n \n IGC\/A<\/a><\/td>\n Government of France (ANSSI, DCSSI)<\/td>\n CA requested removal<\/td>\n Oct 17, 2020<\/td>\n<\/tr>\n \n RSA Security 2048 V3<\/a><\/td>\n RSA (EMC)<\/td>\n CA requested removal<\/td>\n Feb 22, 2026<\/td>\n<\/tr>\n \n Root CA Generalitat Valenciana<\/a><\/td>\n Government of Spain, Autoritat de Certificaci\u00f3 de la Comunitat Valenciana (ACCV)<\/td>\n CA requested removal<\/td>\n July 1, 2021<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"