Hackers obtain counterfeit TLS certificates for Google and other large services
MentionsGoogle
Attackers hijacked three top-level domains and used their control to mint counterfeit TLS certificates for Google and other large organizations, Google said Tuesday. The attackers launched a series of attacks on the .gh, .sl, and .as country code top-level domains (ccTLDs) and then modified authoritative DNS records for selected domains within those namespaces.
Summary from Ars Technica Security.
Explained
The technology and terms in this story. Learn more
- ProtocolTLS · Transport Layer SecurityThe encryption protocol behind HTTPS: it keeps traffic between two programs private and proves who the server is.
- ConceptCertificate authorityAn organisation trusted to vouch for a website's identity by signing its certificate.
- ProtocolDNS · Domain Name SystemThe internet's phone book: it turns names like example.com into the addresses computers connect to.