diff --git a/CHANGES b/CHANGES index f514eb0177..8b055e19ee 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,8 @@ +5275. [bug] Mark DS records included in referral messages + with trust level "pending" so that they can be + validated and cached immediately, with no need to + re-query. [GL #964] + 5274. [bug] Address potential use after free race when shutting down rpz. [GL #1175] diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 9f5ba91667..399b70e64b 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -154,6 +154,13 @@ algorithm and same Server Secret for the best performance. + + + DS records included in DNS referral messages can now be validated + and cached immediately, reducing the number of queries needed for + a DNSSEC validation. [GL #964] + +