A country that has control over its Internet service providers and has access to fake digital certificates could create a website that would be almost impossible to distinguish from, for example, Gmail.com. That's what some experts think happened in Iran last month.

A forensics report commissioned by DigiNotar found someone had hacked into DigiNotar and set up a fake Google.com site that was used in late July and August to spy on as many as 300,000 Iranians.

Most browsers no longer trust the DigiNotar certificates, but if Comodohacker's claims are true there could be further problems in store.

The IDG News Service