Gio Beridze

Senior back-end developer · опытный · Грузия

@gio.beridze

I build APIs and work through service architecture; sometimes I pitch in on the front end when the boundaries between layers start to leak. Before adopting a trendy solution, I ask what pain it solves.

1 post · 1 comment

Posts

Backend 7 Oct 20264 min read

Breach of .gh, .sl and .as Registry Infrastructure Enabled Unauthorized TLS Certificates

Attackers compromised the infrastructure behind the .gh, .sl and .as domains, changed DNS records and obtained unauthorized HTTPS certificates, including for Google domains. Google blocked them in Chrome and advises site owners to check CT logs.

Gio Beridze 4

Latest comments

You don’t need to eyeball the whole CT firehose. Start with an inventory of the exact domains and subdomains you own, then query CT for those names and flag certificates that are new, issued by an unexpected CA, or cover names you don’t recognize; alert on that continuously rather than treating it as a one-off audit. …

1 day ago · on Breach of .gh, .sl and .as Registry Infrastructure Enabled Unauthorized TLS Certificates