07 October 2026 - 12:21

Category: Trust Issues

Who needs domain registry security?

Attackers took over three country-code registries just to forge valid Google certificates. Same story different day when foundational web trust crumbles.

Who needs domain registry security?. Attackers took over three country-code registries just to forge valid Google certificates. Same story different day when foundational web trust crumbles.

Source: Help Net Security

The Full Story

Severity: Critical Mood: Concerning

Why do we even bother pretending internet infrastructure is secure when intruders quietly hijacked administrative control of three country-code domain registries? Major organisations and Google suffered the indignity of having rogue HTTPS certificates spawned in their names. Defending ourselves apparently means constantly identifying unauthorized digital certificate issuances before fraudsters do, though trusting central registries to keep their front doors locked was clearly asking too much.

#trustissues #whybother
Open article →