Domains, DNS, and TLS Certificates
Security, Compliance and Performance. These are great sounding words and every IT executive worth their paycheck is all over them. So why do large, sophisticated companies keep experiencing catastrophic domain and DNS-related outages again and again? See how major brands like Sorenson Telecom, Equifax and even Microsoft suffered domain-downtime and loss of customer goodwill.
GoDaddy weakness let bomb threat scammers hijack thousands of big-name domains →
Revealed: How domains owned by Expedia, Mozilla, and Yelp sent bomb hoaxes.
Wave of DNS Hijackings Targets Companies on Unprecedented Scale →
Clever trick allows attackers to obtain valid TLS certificate for hijacked domains.
Stronger DNS Security Stymies Would-Be Criminals →
2018 saw a reduced number of huge DNS-facilitated DDoS attacks. Vendors and service providers believe that malicious impact will drop with continued technology improvements.
When a network intel provider’s domain serves fraudulent content, something is wrong →
ThousandEyes, a firm that provides DNS monitoring, falls prey to its own DNS goof.
Google Chrome 70 security feature will axe trust for hundreds of critical websites →
https://www.trustedreviews.com/news/google-chrome-70-security-feature-will-axe-trust-hundreds-critical-websites-3602774
TLS is Dead, Long Live TLS →
The Payment Card Industry (PCI) council have spoken. Early versions of Transport Layer Security (TLS) and Secure Sockets Layer (SSL) are now being forced into obscurity by the Payment Card Industry Data Security Standard (PCI DSS) 3.2.1, pushed there by years of security failures and a technological horizon in which those failures will simply not be acceptable.