> But if someone is able to perform a man-in-the-middle attack against your website, then he can intercept the certificate verification, too. For anyone intere

> But if someone is able to perform a man-in-the-middle attack against your website, then he can intercept the certificate verification, too. For anyone interested in robustly mitigating this, there's CAA records and RFC 8657: https://acme-lecaa.charlotte.edu/ https://acme-lecaa.charlotte.edu/