Millions of iPhones, Android smartphones, consoles (PS4, PS3, etc.) and connected televisions are at risk of being suddenly deprived of an Internet connection from September 30, 2021. A very widespread security certificate is indeed preparing to expire, leaving many non-updated devices in limbo.
Do you use an iPhone, an Android smartphone, a console or an older generation connected TV every day? Some of your devices risk being suddenly deprived of Internet connection from September 30, 2021, warns computer security researcher Scott Helme in a post published on his blog. “You may or may not need to do anything about it, but I bet some things will probably not work that day,” prophesies Scott Helme.
On that day, an important security digital certificate called IdentTrust DST Root CA X3 will expire. This certificate is used to certify another extremely popular certificate, ISRG Root X1. Proposed by Let's Encrypt, a certification authority born in 2015, this protocol encrypts a large part of the connections made on the Word Wide Web.
Read also: A solar storm could cause an “internet apocalypse” as early as 2023
Which devices released before 2017 are affected?
Many older devices still rely on IdentTrust DST Root CA X3 to certify ISRG Root X1. In this context, these terminals will have to update to continue to take advantage of certain Internet features, such as watching videos on Netflix.
Chances are that many devices released before 2017 will be affected, especially if you have never installed a software update. If your terminal is still running its factory software, you may lose Internet access. Fortunately, it is possible, in most cases, to avoid failures by installing an update on your smartphone, television or console.
In the case of a smartphone running Android, it is necessary to install Android 2.3.6 Gingerbread or a later version to maintain a full Internet connection. From 2024, these phones will have to upgrade to Android Nougat 7.1.1. According to the researcher, a third of Android phones in circulation are potentially affected by the expiry of the Let's Encrypt certificate.
If you are using a Mac running macOS 10.12.0 (or earlier) or an iPhone running iOS 9 (or earlier version of the OS), you are advised to install a firmware update if it is available. Same story if you're using a PlayStation 4 with firmware version earlier than 5.00 and PCs running Windows XP with Service Pack 2 or earlier.
Here is the full list of platforms impacted by Let's Encrypt's certificate expiration:
For now, it is still difficult to estimate the extent of the failures that will occur on September 30. Many devices rely on multiple digital security certificates, which could limit breakage. “One thing I do know, however, is that at least something, somewhere is going to break,” warns Scott Helme.
In case of failure on September 30, turn to Firefox
If your device is unable to upgrade, you may experience internet connection issues as of September 30. However, there is a workaround to continue connecting to the Internet: Firefox. As Let's Encrypt explains on its official website, Mozilla's web browser does not rely on security certificates operated by the operating system. Instead, Firefox relies on its own digital certificates to encrypt Internet connections.
Aware of the potential problems generated by the abandonment of IdentTrust DST Root CA X3, Let's Encrypt has several times preferred to postpone the transition to ISRG Root X1. Initially, the transition from one digital certificate to another was planned for sometime last year. The operation was then postponed to January 2021 before finally being organized a few months later. Are you using a device that is at risk of being disconnected? We are waiting for your testimony in the comments.
Source: Scott Helme's blog