Securing Certificate Issuance using Multipath Domain Control Validation
…Because each DNS query has its own randomized query identifiers and source port, a fake DNS response must match the DNS query’s identifiers to be convincing. Because these query identifiers are…