Which CA was used for the exploit? I know letsencrypt had work to validate from multiple paths [1]. If it were a more lax CA then just pointing CAA at somewhere

Which CA was used for the exploit? I know letsencrypt had work to validate from multiple paths [1]. If it were a more lax CA then just pointing CAA at somewhere like letsencrypt could possibly be sufficient protection. 1 https://letsencrypt.org/2020/02/19/multi-perspective-validation.html https://letsencrypt.org/2020/02/19/multi-perspective-validat...