IT lexicon › Security › Ryan Sleevi

Ryan Sleevi

Security På svenska → Updated: 2026-10-17

The Google engineer who was the loudest voice when browsers started punishing sloppy certificate authorities.

Sleevi worked on the networking stack and certificate handling in Chrome and became central to how browser root programmes set requirements for certificate authorities. His detailed, sometimes merciless posts on Mozilla's policy list became de facto public investigations of CAs that had misissued.

Best known is the 2017–2018 process in which Chrome gradually stopped trusting Symantec's certificates after repeated misissuance — one of the world's largest CAs dismantled by version number. He also pushed for Chrome to require Certificate Transparency for new certificates and for shorter validity periods, on the grounds that a system which only works if nobody cheats doesn't work.

← Back to the lexicon