Certificate Transparency
-
Counterfeit TLS Certificates: How DNS Hijacks Break Web Trust
A recent report from Ars Technica breaks down a critical incident where attackers managed to generate valid digital security certificates for high-profile domains without breaking into the companies’ actual servers. The attackers compromised three country-code domain registries (.gh, .sl, and .as) and modified the authoritative Domain Name System (DNS) records. Because certificate authorities rely on…