Iranian banks' SSL certificates are being revoked due to OFAC sanctions
2 days ago
- Iranian banks are moving to new domains because browsers stopped trusting their SSL certificates.
- Bank Melli Iran notified customers via text; Bank Mellat switched without notice or redirect.
- The issue is certificate revocation due to sanctions compliance by foreign issuers like Let's Encrypt and Certum.
- Government sites, including the Central Bank of Iran and Communications Regulatory Authority, are also affected.
- New domains create security risks as customers may be directed to phishing sites via search.
- Frequent browser warnings on legitimate sites train users to ignore them, increasing phishing susceptibility.
- The extent of affected Iranian domains is unknown.