I’m researching for countermeasures against BGP Attacks as discussed in this paper presented at USENIX: Bamboozling Certificate Authorities with BGP So far I only found this post in the Let’s Engrypt Forum: Using BGP to Acquire Bogus TLS Certificates I was also trying to find information in the Gi…

@lipflip010 Thanks for the question, We are nearing a production enforcing deployment of multi perspective validation but haven't launched it yet. I'm hopeful we can do this in Q1 2020 but it's primarily blocked on SRE time. [image] _az: they are both configured to only require a single VA to …

This isn’t an authoritative answer, but from what I have observed recently, both staging and production now have multi-VA enabled, but production they are both configured to only require a single VA to get a successful response.

Does DNS challenge(or just DNS lookup) also do multi-VA thing?

[image] cpu: I’m hopeful we can do this in Q1 2020 but it’s primarily blocked on SRE time. I'm hopeful for this too. From the SRE perspective (knee-slap), we're developing capacity plans in preparation for a hardware refresh to support future growth.

Had a few more thoughts about this thread at the end of the day :slight_smile: [image] lipflip010: I’m researching for countermeasures against BGP Attacks We'd love to hear about your research/findings. We try to keep an eye on this space and support academic research where we can. If you ha…

First of all, thanks to all of you for your detailed responses! [image] cpu: We’d love to hear about your research/findings. We try to keep an eye on this space and support academic research where we can. If you have a project relevant to us or security research you’re performing in this space …

[image] lipflip010: First of all, thanks to all of you for your detailed responses! Happy to help! [image] lipflip010: I think I have to clarify the kind of research I did :sweat_smile: I’m in my undergrad now and had to prepare a presentation based on the paper I mentioned in my questio…

What is the current status of the implementation of multi-viewpoint validation?

Issuance Tech

jsha February 3, 2020, 11:45pm 10

FYI we’ve announced the launch plan for multi-viewpoint validation: ACME v1/v2: Validating challenges from multiple network vantage points.

Topic		Replies	Views
Validating challenges from multiple network vantage points API Announcements	0	23951	August 25, 2017
Multi-Perspective Validation & Geoblocking FAQ Issuance Tech	6	6822	May 16, 2024
FAQ should be updated for multi-VA Site Feedback	3	819	February 20, 2020
Multiple vantage points change - when is the validation aborted? Issuance Tech	4	978	February 5, 2020
Let's Encrypt is adding two new remote perspectives for domain validation API Announcements	2	7561	March 27, 2024

What is the current status of the implementation of multi-viewpoint validation?

Related topics