HTTPS CERTIFICATE INDUSTRY PHASING OUT LESS SECURE DOMAIN VALIDATION METHODS

Summary from the TLDR InfoSec newsletter

Chrome Root Program and CA/Browser Forum adopted Ballots SC-080, SC-090, and SC-091 to sunset 11 legacy Domain Control Validation methods relying on email, phone, fax, postal mail, and reverse DNS lookups by March 2028, pushing Certificate Authorities toward automated, cryptographically verifiable ACME-based validation to prevent fraudulent certificate issuance.