For DNS managers, it’s a known thing to restrict the use of domains that start with _. It’s effectively a reserved keyword. In this case, a sophisticated attac

For DNS managers, it’s a known thing to restrict the use of domains that start with _. It’s effectively a reserved keyword. In this case, a sophisticated attacker can get certificates for domains they don’t control by abusing this.