Multi-Perspective Validation
A security mechanism for certificate domain validation that simultaneously issues validation requests from multiple independent network locations worldwide and compares the results, defending against network attacks such as BGP hijacking and DNS cache poisoning.
Timeline (last 90 days)
Multi-perspective validation (MPV) means having the same validation request issued simultaneously from multiple independent network nodes distributed around the world, and only judging it as passed when a majority or all perspectives return consistent results.
Multi-perspective validation primarily defends against two types of attacks: BGP hijacking and DNS cache poisoning.
Domains using GeoDNS or Anycast may fail validation under multi-perspective validation, because these technologies cause different validation nodes to resolve to different IP addresses, and some edge nodes may not have the validation path correctly configured.
Some corporate intranets or test environments point domains to private addresses via the hosts file or internal DNS; such configurations may pass by luck under a single perspective, but will fail under multi-perspective validation.
It is a trend in the certificate issuance industry that multi-perspective validation is gradually changing from a bonus to a must-have.
All Facts (5)
Multi-perspective validation (MPV) means having the same validation request issued simultaneously from multiple independent network nodes distributed around the world, and only judging it as passed when a majority or all perspectives return consistent results.
50%UnverifiedMulti-perspective validation primarily defends against two types of attacks: BGP hijacking and DNS cache poisoning.
50%UnverifiedDomains using GeoDNS or Anycast may fail validation under multi-perspective validation, because these technologies cause different validation nodes to resolve to different IP addresses, and some edge nodes may not have the validation path correctly configured.
50%UnverifiedSome corporate intranets or test environments point domains to private addresses via the hosts file or internal DNS; such configurations may pass by luck under a single perspective, but will fail under multi-perspective validation.
50%UnverifiedIt is a trend in the certificate issuance industry that multi-perspective validation is gradually changing from a bonus to a must-have.
50%