If the operator of .LY might takeover the domain to return DANE records that it controls, why wouldn&#x27;t it takeover the domain and procure a domain validated certificate from a CA?<p>For extra sneakyness, they could probably return the regular glue records and whois information to most requestors, and poisoned values to the targeted CA, to get the certificate up an running in advance of hijacking the domain in general.