Re: I don’t understand...
7: Because they control the website, they can register letsencrypt certs
Woah, hang on. I can understand Let's Encrypt issuing a cert for foobar.azurewebsites.net but can (and would) they do that for foobar.pwc.com in this situation?
What I've read about LE in the last two years hasn't encouraged me to use them at all, but I didn't think there was a gaping hole that wide.