Iranian Authority Regains Access Amid Sanctions Concerns
The Persian Gulf Straits Authority (PGSA) in Iran was able to restore its online presence for four days thanks to a certificate from a Shanghai-based internet security provider. Afterward, this access was revoked, raising alarms about compliance with U.S. sanctions, according to global internet watchdogs.
This certificate, known as a domain-validated certificate, allows verification of control over a website. However, it is usually issued without strict manual checks. Following the temporary access, U.S. sanctions experts called on the provider, TrustAsia, to examine its compliance protocols. Jeremy Paner, a partner at a legal firm, warned TrustAsia about acting before it’s “too late.”
The PGSA’s website had first become inaccessible on August 10, due to disruptions blamed on outside political influences, as stated on a social media post.
In a further development, Iran has requested discussions with the U.S., while the White House has made it clear that any violence would be met with a strong response.
NetBlocks, an internet watchdog, reported that the PGSA lost security credentials after being added to the sanctions list on May 27. This resulted in its website not being accessible through regular web browsers, forcing shipping companies to resort to less secure connections that could expose their data to risks.
Although no data breaches have been reported yet, the shift to unencrypted methods led to vulnerabilities that could potentially allow unauthorized access to information exchanged by shipping firms. A representative from NetBlocks indicated that these changes might make it easier for authorities to monitor communications.
On August 17, the PGSA announced that their website was again accessible, allowing users to submit requests securely. However, they acknowledged that if the issue arises again, only specific browsers might be able to access the site.
TrustAsia later confirmed its involvement in issuing new digital credentials to the PGSA, despite existing sanctions. The certification enables the PGSA to process fees from vessels passing through the Strait of Hormuz. The U.S. Treasury Department, in a previous announcement, stated that the PGSA engages in unlawful activities that violate international regulations.
Concerns around TrustAsia’s operations have escalated, with experts arguing that any service rendered to Iranian agencies under sanctions could lead to further regulatory scrutiny. Paner emphasized that the U.S. government has significant authority to impose sanctions on foreign companies offering services to sanctioned Iranian firms.
TrustAsia’s practices have sparked eyebrows, as it appears to sidestep the standard compliance norms that many Western companies follow. Toker noted that TrustAsia’s actions could create significant complications involving international trust in digital security, affecting broader online communications.
As tensions continue, the U.S. has ramped up sanctions, with nearly 60 Iran-related individuals and entities facing punitive measures. The U.S. Treasury Secretary has described these actions as part of an “economic onslaught” targeting Iran’s global financial framework.
The situation remains fluid, and future compliance from TrustAsia may be scrutinized closely to avoid unintended consequences amid ongoing sanctions efforts.
