Fortunately, it was mitigated before Let's Encrypt was publicly trusted.. http://www.ietf.org/mail-archive/web/acme/current/msg00611.h...