What kind of resolution are you hoping for? Or asked differently, what kind of threads do you still see as open? For me, the biggest bummer was the lacking sec

What kind of resolution are you hoping for? Or asked differently, what kind of threads do you still see as open? For me, the biggest bummer was the lacking security culture that let a cert validation component to not properly validate certs, in at least two ways (didn't enforce tier separation; accepted tokens signed by an expired or revoked CA).