Dear colleagues, Please read this new article by Ralph Dolmans from NLnet Labs. In this article Ralph describes a flaw that made it possible to downgrade secure connections and how it got fixed:
https://labs.ripe.net/Members/ralph_dolmans/the-peculiar-case-of-nsec-processing-using-expanded-wildcard-records Kind regards, Mirjam Kühne RIPE NCC