validation from rndc.  This is useful for the
                        mobile hosts where the current connection point
                        breaks DNSSEC (firewall/proxy).  [RT #15592]

                                rndc validation newstate [view]

                        validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]

                        to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.

                        based on which attempt it is to the nameserver
                        and not the nameserver itself. [RT #13548]

                        dst_context_destroy() when cleaning up after a
                        error. [RT #15835]

                        occasionally follow a random pointer due to
                        structures not being completely zeroed. [RT #15806]

                        struct addrinfo._ai_pad exists.  [RT #15783]

                        New zone option "update-check-ksk yes;".  [RT #15817]

                        This allows named to connect to entropy gathering
                        daemons that use fifos instead of sockets. [RT #15840]

                        when a positive one for the type was learnt.
                        [RT #15818]

                        appear in the output of 'show'. [RT #15797]

                        [RT #15702]

                        after the timestamp if "print-time yes" was specified.
                        [RT #15844]