mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 22:15:20 +00:00
Code Issues Releases Wiki Activity

Add CHANGES and release note for [GL #1316]

Browse Source
This commit is contained in:
Matthijs Mekking
2021-10-06 16:15:36 +02:00
parent 2abad4d969
commit 0870d666dc
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -1,3 +1,6 @@
5739. [func] Change default of 'dnssec-dnskey-kskonly' to 'yes'.
[GL #1316]
5738. [bug] Enable idn2 UseSTD3ASCIIRules=true to implement
additional unicode validity checks. [GL #1610]

6
doc/notes/notes-current.rst
View File

@@ -78,6 +78,12 @@ Feature Changes
.. _UseSTD3ASCIIRules: http://www.unicode.org/reports/tr46/#UseSTD3ASCIIRules
- The default for ``dnssec-dnskey-kskonly`` is changed to ``yes``. This means
that DNSKEY, CDNSKEY, and CDS RRsets are now only signed with the KSK by
default. The additional signatures from the ZSK that are added if the option
is set to ``no`` add to the DNS response payload without offering added value.
:gl:`#1316`
Bug Fixes
~~~~~~~~~