I don&#x27;t understand. How is it being &quot;abused&quot;? If the attacker has actual DNS access to create ad.{legitimate domain}.com, then Let&#x27;s Encrypt is working as intended. So what if they&#x27;re hosting malware—that&#x27;s {legitimate domain}.com&#x27;s problem.<p>Let&#x27;s Encrypt has absolutely nothing to do with content behavior safety, only domain validation and encryption to keep data away from prying eyes.<p>This title is no different from &quot;Chairs Now Being Abused by Criminals&quot;. It&#x27;s nonsensical and completely unrelated. Do you care that criminals have started using chairs to sit down (<i>gasp</i>)? I don&#x27;t think this even belongs on Hacker News.