All news with #dns over https tag

Thu, September 4, 2025

Unauthorized TLS Certificates Issued for 1.1.1.1 by Fina CA

#Disclosure #Certificate Transparency #Fina CA #DNS over HTTPS #DNS over TLS #Microsoft

🔒 Cloudflare reported that Fina CA issued twelve unauthorized TLS certificates for the public DNS IP 1.1.1.1 between February 2024 and August 2025. All certificates have been revoked and Cloudflare found no evidence they were used maliciously, noting that successful impersonation would also require client trust in Fina and interception of traffic. The misissuance was detected via Certificate Transparency logs, and Cloudflare is improving alerts, monitoring, and triage to prevent similar lapses.