>a block of IP addresses used by Softaculous services (162.55.80.0/24)
>part of our infrastructure at Hetzner) was affected by a BGP hijack:
>an unauthorized announcement of that address space by an unrelated network
>which diverted internet traffic destined for those addresses to a server operated by an attacker
>the attacker obtained a technically valid TLS certificate for our domains
>so connections affected by the hijack showed no certificate warning
[0] https://www.virtualizor.com/blog/security-incident-bgp-hijacking/
Mit diesem Feld im DNS record wäre das sicher nicht passiert:
<CAA 128 issue letsencrypt.org;validationmethods=dns-01;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/12345678
Einmal mit Profis arbeiten *wieher*