mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-01 06:55:30 +00:00
refer to doc/misc/dnssec for DNSSEC information;
other minor editing
This commit is contained in:
21
README
21
README
@@ -74,8 +74,8 @@ BIND 9.0.0b3
|
|||||||
be most useful to advanced users working with IPv6 or DNSSEC.
|
be most useful to advanced users working with IPv6 or DNSSEC.
|
||||||
|
|
||||||
BIND 9.0.0b3 is not functionally complete, and is not a release
|
BIND 9.0.0b3 is not functionally complete, and is not a release
|
||||||
candidate for BIND 9.0.0. ISC anticipates a number of additional
|
candidate for BIND 9.0.0. ISC anticipates at least one additional
|
||||||
beta releases between now and June, when BIND 9.0.0 is scheduled to
|
beta release between now and June, when BIND 9.0.0 is scheduled to
|
||||||
be released.
|
be released.
|
||||||
|
|
||||||
ISC does not recommend using BIND 9.0.0b3 for "production"
|
ISC does not recommend using BIND 9.0.0b3 for "production"
|
||||||
@@ -91,12 +91,11 @@ BIND 9.0.0b3
|
|||||||
DNS queries differently to different requestors. This
|
DNS queries differently to different requestors. This
|
||||||
will make split DNS setups much easier to build.
|
will make split DNS setups much easier to build.
|
||||||
|
|
||||||
Basic support for validation of DNSSEC signatures is
|
|
||||||
has been implemented. This functionality should
|
|
||||||
be considered experimental at this point.
|
|
||||||
|
|
||||||
NOTIFY (RFC1996) has been implemented.
|
NOTIFY (RFC1996) has been implemented.
|
||||||
|
|
||||||
|
Basic support for validation of DNSSEC signatures has
|
||||||
|
been implemented. For details, see doc/misc/dnssec.
|
||||||
|
|
||||||
The "dig" and "host" tools have been completely rewritten
|
The "dig" and "host" tools have been completely rewritten
|
||||||
and are included in the base distribution.
|
and are included in the base distribution.
|
||||||
|
|
||||||
@@ -105,13 +104,6 @@ BIND 9.0.0b3
|
|||||||
|
|
||||||
There are still some known bugs, including:
|
There are still some known bugs, including:
|
||||||
|
|
||||||
The random data used in generating DNSSEC keys and
|
|
||||||
signatures contains a significant pseudorandom
|
|
||||||
component and is therefore not cryptographically
|
|
||||||
strong. We do not recommend the use of keys generated
|
|
||||||
by the key generation tools in this distribution
|
|
||||||
in production.
|
|
||||||
|
|
||||||
The option "query-source * port 53;" will not work as
|
The option "query-source * port 53;" will not work as
|
||||||
expected. Instead of the wildcard address "*", you need
|
expected. Instead of the wildcard address "*", you need
|
||||||
to use an explicit source IP address.
|
to use an explicit source IP address.
|
||||||
@@ -122,8 +114,7 @@ BIND 9.0.0b3
|
|||||||
Some of the more significant items that will be implemented or
|
Some of the more significant items that will be implemented or
|
||||||
enhanced in a future beta are
|
enhanced in a future beta are
|
||||||
|
|
||||||
|
Selective forwarding
|
||||||
Selective Forwarding
|
|
||||||
|
|
||||||
Stub zones
|
Stub zones
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user