lobovkin

I run ctlogs.dev. Your links work now: search covers CA certificates, and a bare hash is also tried as a key. They're intermediates (each also cross-signed by Sectigo), not roots. Nothing they issued was in CT logs before the weak keys were found; the first entries appeared two days after Chrome's block. Full list and timeline: https://ctlogs.dev/blog/emudhra-ca-compromise

Someone has pushed over 100k certificates for google.com into CT logs today, signed with the compromised EV G3B key: https://ctlogs.dev/ca/e7568fe6e12331f4fd7de61da4c7559d0f8eb1... https://ctlogs.dev/search?q=*.google.com

This isn't some new way to get Gmail on your domain, but it's easier and faster to set up with the browser extension. In wizard mode, you first set up all mail forwarding from your domain (wildcard *@yourdomain.com) to your Gmail address. A free plan from the EForw email forwarding service is used. Then it is set up to send mail from Google's servers via the "Send As" feature. So outgoing emails from your domain will have a good sender reputation. I will be happy to feedback/suggestions for improvement.

I have decided to post this link so not only Russians know about it :)