= CertificateTransparency =
How Certificate Transparency Works

http://www.certificate-transparency.org/how-ct-works

https://thehackernews.com/2016/04/ssl-certificate-transparency.html

What is Certificate Transparency? How It helps Detect Fake SSL Certificates
April 11, 2016Swati Khandelwal

----
https://thehackernews.com/2019/01/dns-hijacking-cyber-attacks.html

DHS Orders U.S. Federal Agencies to Audit DNS Security for Their Domains
January 23, 2019

"The attacker alters DNS records, like Address (A), Mail Exchanger (MX), or Name Server (NS) records, replacing the legitimate address of a service with an address the attacker controls," the DHS advisory reads.

DHS Orders Federal Agencies to Audit DNS Security for Their Domains

The DHS orders federal agencies to:

    audit public DNS records and secondary DNS servers for unauthorized edits,
    update their passwords for all accounts on systems that can be used to tamper DNS records,
    enable multi-factor authentication to prevent any unauthorized change to their domains, and
    monitor certificate transparency logs.