3 ms·
I do not see how that would be possible.
by willstrafach 10y ago
I do not see how that would be possible.
- pfg 10y agoAnything from cache poisoning of the CA's DNS server, BGP hijacking or pwning any network hop between the CA and the victim would be sufficient. Domain validation is nothing but a DNS query or a HTTP request.