
The Peculiar Case of NSEC Processing Using Expanded Wildcard Records
Ralph Dolmans
Based in Amsterdam, the Netherlands
Systems and software engineer @ NLnet Labs More
• 14 min read
Last week we released a new version of Unbound with a fix for CVE-2017–15105. Unbound, Google public DNS, PowerDNS and Dnsmasq contained a flaw that made it possible to downgrade secure connections.








