1. CertificateTransparency
How Certificate Transparency Works
http://www.certificate-transparency.org/how-ct-works
https://thehackernews.com/2016/04/ssl-certificate-transparency.html
What is Certificate Transparency? How It helps Detect Fake SSL Certificates April 11, 2016Swati Khandelwal
https://thehackernews.com/2019/01/dns-hijacking-cyber-attacks.html
DHS Orders U.S. Federal Agencies to Audit DNS Security for Their Domains January 23, 2019
"The attacker alters DNS records, like Address (A), Mail Exchanger (MX), or Name Server (NS) records, replacing the legitimate address of a service with an address the attacker controls," the DHS advisory reads.
DHS Orders Federal Agencies to Audit DNS Security for Their Domains
The DHS orders federal agencies to:
- audit public DNS records and secondary DNS servers for unauthorized edits, update their passwords for all accounts on systems that can be used to tamper DNS records, enable multi-factor authentication to prevent any unauthorized change to their domains, and monitor certificate transparency logs.