An organization was recently compromised by an attacker who used a server certificate with the company’s domain issued by an irrefutable CA.
Which of the following should be used to mitigate this risk in the future?
A. OCSP
B. DNSSEC
C. Corticated pinning
D. Key escrow
Answer: B