[afnog] Google domain TLS certificate (was: Africacert opinion on cybersecurity threat Intelligence)

Loganaden Velvindron loganaden at gmail.com
Mon Oct 12 04:20:40 UTC 2026


On Wed, 07 Oct 2026, 16:15 , <sm+afrinic at elandsys.com> wrote:

> Hello,
>
> There was an article about a government email service going down
> about a week ago [1].  Subsequently, there was a news story about a
> series of attacks on two top level domains within the region
> [2].  The following type of attack was attempted before:
> https://www.elandsys.com/r/61848


Chrome team  did take some measures i believe ?


This is a concern for african countries i believe.

Thanks for sharing.


>
> Would the domain be protected against unintended certificate
> mis-issue by implementing RFC 8659?
>
>    $ dig -t CAA google.com.gh +short
>    0 issue "pki.goog"
>
> It doesn't look like it helped in the above case.
>
> Google's statement about the incident is correct, i.e. none of its
> systems were compromised.
>
> Regards,
> S. Moonesamy
>
> 1. https://www.elandsys.com/r/61347
> 2. https://www.elandsys.com/r/61348
>
>
> _______________________________________________
> afnog mailing list
> https://www.afnog.org/mailman/listinfo/afnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.afnog.org/pipermail/afnog/attachments/20261012/15fa2a46/attachment.html>


More information about the afnog mailing list