Link: https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/

Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.

browser-side intervention should not be relied on to protect your users

Uh huh, sounds like a pitch to have more unnecessary data on the servers side. Just disable JS on every website.

Oh, that's not good

Christ in a bucket.

Attackers hijacked three top-level domains and used their control to mint counterfeit TLS certificates for Google and other large organizations, Google said Tuesday.

The attackers launched a series of attacks on the .gh, .sl, and .as country code top-level domains (ccTLDs) and then modified authoritative DNS records for selected domains within those namespaces.

Welp. That's just about the worst

This sounds like a DNS side attack and not a certificate side attack...

The crypto is solid. These ccTLD admins suck.

I can't think of any reason not to issue DV certificates if...you can V the D.

Hot.

Someone explain eli5 me?

Google is a big bully who knows everybody's secrets and likes to tell people what to think and what to do. Now someone tricked a costume shop into making them a high quality Google costume in which they can walk around do some of the bad things Google does. It will take some time until all of us have been warned of that impostor and we can at least be sure again who's bullying us.