How does TLS-SNI-02 fix this issue?
...
Edit: I've removed most of my post here... This was already acknowledged in the article. 02 is vulnerable also.
...
Edit: I've removed most of my post here... This was already acknowledged in the article. 02 is vulnerable also.
Validating www.abc.com, SNI and dnsName is well-known-acme-pki.www.abc.com and the certificate should have some other parameter stuffed with a challenge response that is defined to be a challenge response calculated over the inputs of a random token provided to the requestor by the CA and the account key of the requestor.