Someone Can Get an SSL Certificate for Your Domain. CT Logs Are How You Find Out.

Here is a failure your monitoring is built to miss. Somebody — an attacker who briefly controlled your DNS, a subdomain you forgot you delegated, an ex-vendor whose access was never revoked, or a phis...