The Peculiar Case of NSEC Processing Using Expanded Wildcard Records
• 14 min read
Last week we released a new version of Unbound with a fix for CVE-2017–15105. Unbound, Google public DNS, PowerDNS and Dnsmasq contained a flaw that made it possible to downgrade secure connections.
