EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·6d ago·5 min read
Chrome's Response to Recent ccTLD Registry Hijacks
TL;DR
Chrome responded to recent domain hijacks affecting .gh, .sl, and .as ccTLDs by blocking unauthorized HTTPS certificates and revoking them with issuing CAs. Users are protected without needing to take action, but domain owners must monitor their certificates actively.
✦ Why It Matters
Domain owners should monitor Certificate Transparency logs and implement CAA records to safeguard their domains today.
Key Takeaways
- Monitor Certificate Transparency logs for your domains regularly.
- Implement restrictive CAA records to control certificate issuance.
- Review recent CT log entries for unexpected certificate issuance.
- Collaborate with CAs to ensure revoked certificates are no longer valid.
How It Works
Certificate Transparency (CT) logs are public records that track all issued certificates, allowing domain owners to receive near real-time alerts for unauthorized certificates. By monitoring these logs, organizations can quickly identify and respond to potential security threats.