11-01-2018 12:27
via
zdnet.com
Let's Encrypt disables TLS-SNI-01 validation
It is possible to exploit the protocol to obtain certificates for domains you do not own.
Read more »