[afnog] Google domain TLS certificate (was: Africacert opinion on cybersecurity threat Intelligence)

[sm+afrinic at elandsys.com]

Hello,

There was an article about a government email service going down 
about a week ago [1].  Subsequently, there was a news story about a 
series of attacks on two top level domains within the region 
[2].  The following type of attack was attempted before: 
https://www.elandsys.com/r/61848

Would the domain be protected against unintended certificate 
mis-issue by implementing RFC 8659?

   $ dig -t CAA google.com.gh +short
   0 issue "pki.goog"

It doesn't look like it helped in the above case.

Google's statement about the incident is correct, i.e. none of its 
systems were compromised.

Regards,
S. Moonesamy

1. https://www.elandsys.com/r/61347
2. https://www.elandsys.com/r/61348