1. 09 Nov, 2018 4 commits
  2. 07 Nov, 2018 2 commits
  3. 06 Nov, 2018 5 commits
  4. 05 Nov, 2018 2 commits
  5. 31 Oct, 2018 1 commit
  6. 30 Oct, 2018 4 commits
  7. 29 Oct, 2018 5 commits
  8. 26 Oct, 2018 2 commits
    • Witold Krecicki's avatar
      CHANGES · b338e6dd
      Witold Krecicki authored
      b338e6dd
    • Witold Krecicki's avatar
      Use non-cryptographically-secure PRNG to generate a nonce for cookies. · 6cd89d5e
      Witold Krecicki authored
      Rationale: the nonce here is only used to make sure there is a low
      probability of duplication, according to section B.2 of RFC7873.
      It is only 32-bit, and even if an attacker knows the algorithm used
      to generate nonces it won't, in any way, give him any platform to
      attack the server as long as server secret used to sign the
      (nonce, time) pair with HMAC-SHA1 is secure.
      
      On the other hand, currently, each packet sent requires (unnecessarily)
      a CS pseudo-random number which is ineffective.
      6cd89d5e
  9. 25 Oct, 2018 5 commits
  10. 24 Oct, 2018 3 commits
    • Evan Hunt's avatar
      placeholder · 5888c286
      Evan Hunt authored
      5888c286
    • Michał Kępień's avatar
      Add CHANGES entry · 5b699aaa
      Michał Kępień authored
      XXXX.	[func]		A default list of primary servers for the root zone is
      			now built into named, allowing the "masters" statement
      			to be omitted when configuring an IANA root zone
      			mirror. [GL #564]
      
      XXXX.	[func]		Attempts to use mirror zones with recursion disabled
      			are now considered a configuration error. [GL #564]
      
      XXXX.	[func]		The only valid zone-level NOTIFY settings for mirror
      			zones are now "notify no;" and "notify explicit;".
      			[GL #564]
      
      XXXX.	[func]		Mirror zones are now configured using "type mirror;"
      			rather than "mirror yes;". [GL #564]
      5b699aaa
    • Michał Kępień's avatar
      Add CHANGES entry · 6b1c0a8e
      Michał Kępień authored
      5048.	[doc]		Documentation incorrectly stated that the
      			"server-addresses" static-stub zone option accepts
      			custom port numbers. [GL #582]
      6b1c0a8e
  11. 23 Oct, 2018 3 commits
  12. 22 Oct, 2018 1 commit
  13. 08 Oct, 2018 1 commit
    • Michał Kępień's avatar
      Add CHANGES entry · dc531dc3
      Michał Kępień authored
      5047.	[bug]		Messages logged for certain query processing failures
      			now include a more specific error description if it is
      			available. [GL #572]
      dc531dc3
  14. 05 Oct, 2018 2 commits