I believe it allows a MitM attacker to force a client to downgrade their ciphersuite. This is bad in HTTPS or other SSL environments with short-lived connection

I believe it allows a MitM attacker to force a client to downgrade their ciphersuite. This is bad in HTTPS or other SSL environments with short-lived connections because it gives attackers a lot of chances to play this game. The J-PAKE flaw is similar to those SRP bugs, yes. OpenSSH had the same problem. Sebastien Martini is doing some great work rooting out crypto flaws in widely-used open-source software.