As of March 15, 2025, we have implemented MPIC (Multi-Perspective Issuance Corroboration) as a security measure to mitigate BGP hijacking.

More information is available at: https://open-mpic.org/

MPIC is a new verification requirement from the CA/Browser Forum (https://cabforum.org/working-groups/server/baseline-requirements/documents/) that ensures that domain control and CAA checks are not only performed from a single vantage point on the internet, but instead from multiple, globally distributed perspectives. This approach significantly enhances resilience against routing manipulation.

To enable these globally distributed perspectives, we are leveraging Azure infrastructure.