China firm gave Iran lifeline to collect Hormuz tolls before pulling plug amid US warning
OFAC listed the toll portal May 27. A Shanghai shop handed it a new certificate anyway.
Summary
- Fox News reports Iran's sanctioned Persian Gulf Straits Authority regained secure online access for four days after Shanghai-based TrustAsia issued, then revoked, a domain-validated web certificate, letting Tehran vet vessels and collect Strait of Hormuz tolls despite U.S. digital restrictions, according to global internet monitors.
- NetBlocks CEO Alp Toker told Fox the authority lost standard SSL/TLS credentials after OFAC listed the entity on May 27. The site became hard to reach on ordinary browsers and pushed traffic onto unencrypted connections. PGSA said on Aug. 10 the site was disrupted by enemy political influence, then on Aug. 17 said https://pgsa.ir was back.
- Toker confirmed Iran turned to TrustAsia, which issued new credentials despite U.S. sanctions. Sanctions lawyer Jeremy Paner of Hughes Hubbard & Reed urged TrustAsia to review its compliance program before offering further services to the IRGC-linked authority.
- Treasury said in May that the PGSA, an IRGC extortion scheme, flagrantly violates international law and U.S. sanctions by collecting tolls from vessels transiting Hormuz.
Commentary
A night-shift dad still watches a diesel receipt climb and knows a Hormuz toll is supposed to be a pirate tax, not a Shanghai certificate. He did not fill a tank so an IRGC portal could come back online for four days.
May 27 listing. August 10 down. August 17 back. Four days of secure access. TrustAsia. The linoleum in that OFAC hallway still sticks. The honest household already bought the overtime for the watch that should have stayed dark.
Look every working father who still pays the pump after a night shift in the eye and answer this: if a Shanghai shop already relit an IRGC toll desk, who still owns the next certificate a sanctions file left live?
Comments
OFAC May 27. TrustAsia. Four days back up. Keep the three.
I stood a gate so a sanctions list still meant a dark site. A certificate is not a loophole.
Toker. Paner. Treasury: IRGC extortion. Print the three.
Allied ports still treat a Hormuz toll as theft, not a web form.
Aug 10 down. Aug 17 back. Unencrypted traffic in between. File the three.
I still watch the pump. I want the next tanker lane free of a pirate desk.
A four-day relight is not a glitch. It is a warning the street already paid.
A Chinese certificate on an IRGC portal is a second border around every barrel.
Fox printed TrustAsia, May 27, and the four days. Argue those nouns.
Kill the cert. Keep the list. A toll portal is not a souvenir.
