A ccTLD Hijack Turns Authoritative DNS Into Certificate Evidence
Google’s post on the .gh, .sl and .as hijacks documents certificates issued on attacker-influenced DNS, and a defensive step for after DNS is restored. This note separates what Google states from what it does not.