search
ccTLD registries
Trends
- 1Attackers compromise .gh, .sl and .as domain registries●Attackers compromised .gh, .sl, and .as ccTLD registries. Modified authoritative DNS. Passed automated domain control va
Attackers gained access to the country-code top-level domain registries for Ghana (.gh), Sierra Leone (.sl) and American Samoa (.as) and altered their authoritative DNS records. The changes let them pass automated domain control validation and obtain valid TLS certificates for Google domains and other major brands. Google itself was not hacked, and certificate authorities followed their normal procedures, raising concern about weaknesses in the domain validation trust chain.
- 2Chrome Responds to Recent ccTLD Registry Hijacks●Chrome's Response to Recent ccTLD Registry Hijacks https://blog.google/security/chromes-response-to-recent-cctld-registr
Google has published details of how the Chrome browser is responding to recent hijacks of country-code top-level domain registries. The company's security blog post outlines measures being taken to protect users after attackers gained control of ccTLD registries. Developers and security commentators are sharing the post and discussing its implications for browser trust and internet governance.