HTTP validation establishes control of a host, while DNS validation, broadly speaking, establishes control of DNS. It's possible somebody legitimately controls the webserver on example.com, but doesn't control mail.example.com. That person would be able to pass HTTP validation, but not DNS validation.
6 Likes