diff --git a/CHANGES b/CHANGES
index 90d54ee087..5666accf00 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,7 @@
 
+ 376.	[bug]		The server should always use good entropy when
+			performing cryptographic functions needing entropy.
+
  375.	[bug]		Per-zone "allow-query" did not properly override the
 			view/global one for CNAME targets and additional
 			data [RT #220].
diff --git a/bin/named/server.c b/bin/named/server.c
index d6466b10f9..eb2d1120e0 100644
--- a/bin/named/server.c
+++ b/bin/named/server.c
@@ -15,7 +15,7 @@
  * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: server.c,v 1.213 2000/08/08 01:56:44 gson Exp $ */
+/* $Id: server.c,v 1.214 2000/08/08 18:15:18 bwelling Exp $ */
 
 #include <config.h>
 
@@ -1699,7 +1699,7 @@ ns_server_create(isc_mem_t *mctx, ns_server_t **serverp) {
 		   ISC_R_NOMEMORY : ISC_R_SUCCESS,
 		   "allocating reload event");
 
-	CHECKFATAL(dst_lib_init(ns_g_mctx, ns_g_entropy, 0),
+	CHECKFATAL(dst_lib_init(ns_g_mctx, ns_g_entropy, ISC_ENTROPY_GOODONLY),
 		   "initializing DST");
 
 	server->tkeyctx = NULL;