From d7461772bb103010aa5a2ea953200f3eecab5054 Mon Sep 17 00:00:00 2001 From: Evan Hunt Date: Tue, 6 Aug 2019 09:44:17 -0700 Subject: [PATCH] CHANGES, release note --- CHANGES | 4 ++++ doc/arm/notes.xml | 13 ++++++++----- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/CHANGES b/CHANGES index 007e5d2e32..b8cafb1958 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,7 @@ +5276. [func] DNSSEC Lookaside Validation (DLV) is now obsolete; + all code enabling its use has been removed from the + validator, "delv", and the DNSSEC tools. [GL #7] + 5275. [bug] Mark DS records included in referral messages with trust level "pending" so that they can be validated and cached immediately, with no need to diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 38b250662e..231d6fa66e 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -204,8 +204,13 @@ - The dnssec-lookaside option has been deprecated. - The feature still works, but it is discouraged to use it. [GL #7] + DNSSEC Lookaside Validation (DLV) is now obsolete. + The dnssec-lookaside option has been + marked as deprecated; when used in named.conf, + it will generate a warning but will otherwise be ignored. + All code enabling the use of lookaside validation has been removed + from the validator, delv, and the DNSSEC tools. + [GL #7] @@ -216,9 +221,7 @@ named will now log a warning if - a static key is configured for the root zone, or if - any key is configured for "dlv.isc.org", which has been shut - down. [GL #6] + a static key is configured for the root zone. [GL #6]