Comment by cowtools

I was under the impression that DNSSEC is vulnerable to downgrade attacks. Is this still the case?