How Effective is Multiple-Vantage-Point Domain Control Validation? — mentioned by btown

Sat, 09 Dec 2023 02:29:34 GMT

Let's Encrypt does validate via multiple streams: https://letsencrypt.org/2020/02/19/multi-perspective-validat... But even this is vulnerable if a strong adversary can make it seem like their compromised nameserver is the only reliable nameserver reachable over the network: https://i.blackhat.com/USA21/Wednesday-Handouts/US-21-Shulma... An analysis from early 2023 indicates LE's default setup was suboptimal compared to a multi-cloud quorum policy, which seems like a no-brainer at their scale IMHO: https://arxiv.org/abs/2302.08000

Paper and discussion history. A mention is not an endorsement.

How Effective is Multiple-Vantage-Point Domain Control Validation? · HackerPapers discussions

How Effective is Multiple-Vantage-Point Domain Control Validation? — mentioned by btown