Attackers hijacked three top-level domains and used their control to mint counterfeit TLS certificates for Google and other large organizations, Google said Tuesday.
The attackers launched a series of attacks on the .gh, .sl, and .as country code top-level domains (ccTLDs) and then modified authoritative DNS records for selected domains within those namespaces.
This sounds like a DNS side attack and not a certificate side attack…
The crypto is solid. These ccTLD admins suck.
I can’t think of any reason not to issue DV certificates if…you can V the D.
Hot.