Good write-up.

Here is Cloudflare's post: https://blog.cloudflare.com/acme-path-vulnerability/