mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00
Code Issues Releases Wiki Activity

CHANGES, release notes

Browse Source
This commit is contained in:
Evan Hunt
2021-02-02 15:47:52 -08:00
committed by Ondřej Surý
parent 0aacabc6dc
commit 91718fe4fb
2 changed files with 12 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
CHANGES
View File

@@ -1,7 +1,9 @@
5576. [func] Initial support for DNS-over-HTTP(S). BIND now 5576. [experimental] Initial server-side implementation of DNS-over-HTTPS
includes DNS-over-HTTP(S) layer built on top of nghttp2. (DoH). Support for both TLS-encrypted and unencrypted
Both encrypted and unencrypted HTTP/2 connections HTTP/2 connections has been added to the network manager
are supported. [GL !4566] and integrated into named. (Note: there is currently no
client-side support for DNS-over-HTTPS; this will be
added to dig in a future release.) [GL #1144]
5575. [bug] When migrating to dnssec-policy, BIND considered keys 5575. [bug] When migrating to dnssec-policy, BIND considered keys
with the "Inactive" and/or "Delete" timing metadata as with the "Inactive" and/or "Delete" timing metadata as

12
doc/notes/notes-current.rst
View File

@@ -52,12 +52,12 @@ New Features
an optional ``tls`` option which specifies either a previously configured an optional ``tls`` option which specifies either a previously configured
``tls`` statement or ``ephemeral``. [GL #2392] ``tls`` statement or ``ephemeral``. [GL #2392]
- ``named`` now has initial support for DNS-over-HTTP(S). Both - ``named`` now supports DNS-over-HTTPS (DoH). Both TLS-encrypted and
encrypted (via TLS) and unencrypted HTTP/2 connections are supported. unencrypted HTTP/2 connections are supported (the latter may be used to
The latter are mostly there for debugging/troubleshooting offload encryption to other software).
purposes and for the means of encryption offloading to third-party
software (as might be desirable in some environments to aid in TLS Note that there is no client-side support for HTTPS as yet; this will be
certificates management). [GL !4566] added to ``dig`` in a future release. [GL #1144]
Removed Features Removed Features
~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~