How we mitigated a vulnerability in Cloudflare’s ACME validation logic

A vulnerability was recently identified in Cloudflare’s automation of certificate validation. Here we explain the vulnerability and outline the steps we’ve taken to mitigate it.