Reply to post:

With an HTTP-01 challenge, the client (cert requester) has to prove it controls HTTP (Port 80) for the domain. With TLS-SNI-01 it only had to prove it could reply from the same IP address as the domain.