Resmi.ID DomainAn official name for your business
News

News & latest issues in domains and hosting.

Rule changes, security incidents, and industry news — summarised from trusted sources, with what you need to do.

Archive

More news

SSL
Chrome, Apple, and Microsoft revoke eMudhra certificates: check your SSL

The keys of eight eMudhra intermediate CAs turned out to be weak. Major browsers blocked them within days, and about 30,000 certificates must be replaced.

Illustration of a browser window with a security warning and an SSL certificate crossed out in red
Domain
ICANN reveals 1,615 new top-level domain applications, only 218 from Asia-Pacific

The first new gTLD round since 2012 drew 1,615 applications, including 333 brand extensions. Brand owners should watch the list from 17 November.

Illustration of a globe showing 1,615 surrounded by new domain extensions such as .brand, .shop, and .bank
Security
.gh, .sl, and .as registries hijacked: fake Google certificates were issued

Attackers took over three country registries, changed DNS, and obtained 12 valid TLS certificates for Google domains. Important lessons on domain locks and CAA.

Illustration of a DNS tree with the .gh, .sl, and .as registries highlighted in red and a warning sign
SSL
SSL certificates now last 200 days, dropping to 100 days in March 2027

CA/Browser Forum rules cut certificate lifetimes step by step to 47 days by 2029. Renewing by hand once a year is no longer enough.

Bar chart falling from 398 to 200, 100, and 47 days of SSL certificate validity from 2025 to 2029
Security
Indonesia's PP 33/2026 takes effect 16 January 2027: prepare your website for the PDP Law

The implementing regulation of Indonesia's Personal Data Protection Law is out. Breaches must be reported within 3×24 hours; fines reach 2% of revenue.

Illustration of the PP 33/2026 document, a shield with a check mark, and a clock showing 3×24
Domain
.id domains pass 1.43 million as PANDI tightens action on gambling and phishing sites

PANDI targets 1.5 million .id domains in 2026 while acting on tens of thousands of abusive URLs. High-risk sites can be suspended within 24 hours.

Illustration of the .id extension with a growth chart and a prohibition sign for gambling and phishing sites
Email
Gmail, Yahoo, and Outlook get stricter: mail without SPF, DKIM, DMARC is rejected

Since November 2025 Gmail rejects non-compliant mail, and Outlook has enforced similar rules since May 2025. Your business email needs checking.

Illustration of an email envelope with three check marks for SPF, DKIM, DMARC and the rejection code 550 5.7.515
Hosting
PHP 8.2 support ends 31 December 2026, critical cPanel flaw already exploited

Two reasons to check your hosting now: a PHP version about to lose security updates, and a CVSS 9.8 flaw in cPanel/WHM.

Illustration of a timeline of PHP versions 8.1 to 8.5 and a warning for the cPanel flaw CVE-2026-41940 rated CVSS 9.8
Hosting
Lessons from the AWS, Azure, and Cloudflare outages: don't put everything in one place

Four major outages in the past year were caused by configuration changes and bugs, not attacks. Even small websites go down when everything depends on one provider.

Illustration of a cloud with a lightning bolt and red status indicators for AWS, Azure, and Cloudflare
Hosting
AI training bots are now half of crawler traffic: control their access to your site

According to Cloudflare, 52% of crawler requests in June 2026 came from AI training bots. Site owners can now choose: allow search engines, refuse AI training.

Illustration of a 52 percent donut chart and three crawler robot icons

Need practical steps?

Our guides walk you through setting up domains, DNS, SSL, and email step by step.

Open the guides