11-01-2018 12:27 via zdnet.com

Let's Encrypt disables TLS-SNI-01 validation

It is possible to exploit the protocol to obtain certificates for domains you do not own.
Read more »