2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 22:15:20 +00:00

Add release notes for GL #2472

This commit is contained in:
Michal Nowak
2021-03-08 13:44:22 +01:00
parent 566b8ab85e
commit e6ca82b2c4

View File

@@ -40,7 +40,16 @@ Removed Features
Feature Changes
~~~~~~~~~~~~~~~
- None.
- To prevent users from inadvertently configuring unencrypted
DNS-over-HTTPS (DoH) in BIND 9, ``listen-on`` and ``listen-on-v6``
statements using the ``http`` parameter must now also specify the
``tls`` parameter. ``tls none`` can be used to explicitly allow
unencrypted HTTP connections. [GL #2472]
- ``http default`` can now be specified in ``listen-on`` and
``listen-on-v6`` statements to use the default HTTP endpoint of
``/dns-query``. It is no longer necessary to include an ``http``
statement in ``named.conf`` unless overriding this value. [GL #2472]
Bug Fixes
~~~~~~~~~