Commit d91e3133 authored by Evan Hunt's avatar Evan Hunt Committed by Ondřej Surý
Browse files

CHANGES and release note

parent a7a2fa29
Pipeline #2043 passed with stages
in 8 minutes and 6 seconds
4957. [func] The default setting for "dnssec-validation" is now
"auto", which activates DNSSEC validation using the
IANA root key. (The default can be changed back to
"yes", which activates DNSSEC validation only when keys
are explicitly configured in named.conf, by building
BIND with "configure --disable-auto-validation".)
[GL #30]
4956. [func] Change isc_random() to be just PRNG using xoshiro128**,
and add isc_nonce_buf() that uses CSPRNG. [GL #289]
 
......
......@@ -196,6 +196,17 @@
resort. [GL #221]
</para>
</listitem>
<listitem>
<para>
The default setting for <command>dnssec-validation</command> is
now <userinput>auto</userinput>, which activates DNSSEC
validation using the IANA root key. (The default can be changed
back to <userinput>yes</userinput>, which activates DNSSEC
validation only when keys are explicitly configured in
<filename>named.conf</filename>, by building BIND with
<command>configure --disable-auto-validation</command>.) [GL #30]
</para>
</listitem>
<listitem>
<para>
BIND can no longer be built without DNSSEC support. A cryptography
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment