THREAT OPS › Threat News › HTTPS certificate industry phasing out less secure domain validation methods
HTTPS certificate industry phasing out less secure domain validation methods
<span class="byline-author">Posted by Chrome Root Program Team </span>
<p> Secure connections are the backbone of the modern web, but a certificate is only as trustworthy as the validation process and issuance practices behind it. Recently, the <a href="https://security.googleblog.com/2023/05/how-chrome-root-program-keeps-users-safe.html">Chrome Root Program</a> and the <a href="https://cabforum.
Attributed threat actors
- Earth LuscaG1006
Indicators of compromise
- https://cabforum.org/url
- https://cabforum.org/2024/11/14/ballot-sc080v3-sunset-the-use-of-whois-to-identify-domain-contacts-and-relying-dcv-methods/url
- https://cabforum.org/2025/11/20/ballot-sc-090-gradually-sunset-all-remaining-email-based-phone-based-and-crossover-validation-methods-from-sections-3.2.2.4-and-3.2.2.5/url
- https://cabforum.org/2025/11/12/ballot-sc-091-sunset-3.2.2.5.3-reverse-address-lookup-validation-proposal-of-new-dns-based-validation-using-persistent-dcv-txt-record-for-ip-addresses/url
- https://www.chromium.org/Home/chromium-security/root-ca-policy/moving-forward-together/url
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/url
- https://labs.watchtowr.com/we-spent-20-to-achieve-rce-and-accidentally-became-the-admins-of-mobi/url
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#32242-email-fax-sms-or-postal-mail-to-domain-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#32252-email-fax-sms-or-postal-mail-to-ip-address-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#32244-constructed-email-to-domain-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#322413-email-to-dns-caa-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#322414-email-to-dns-txt-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#32243-phone-contact-with-domain-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#322416-phone-contact-with-dns-txt-record-phone-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#322417-phone-contact-with-dns-caa-phone-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#32255-phone-contact-with-ip-address-contacturl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#32248-ip-addressurl
- https://cabforum.org/working-groups/server/baseline-requirements/requirements/#32253-reverse-address-lookupurl
- https://blog.chromium.org/2023/10/unlocking-power-of-tls-certificate.htmlurl
- 3.2.2.4ipv4
- 3.2.2.5ipv4