From e4946c508eb331c28ce1f2b05c7e2adfe73fe701 Mon Sep 17 00:00:00 2001 From: Andreas Gustafsson Date: Tue, 20 Nov 2001 23:32:09 +0000 Subject: [PATCH] added section on secure zone transfers --- doc/misc/dnssec | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/doc/misc/dnssec b/doc/misc/dnssec index 01d8616ddd..67ecdc98d9 100644 --- a/doc/misc/dnssec +++ b/doc/misc/dnssec @@ -80,4 +80,12 @@ an update occurs. Advanced access control is possible using the "update-policy" statement in the zone definition. -$Id: dnssec,v 1.15 2001/09/05 00:55:47 gson Exp $ +Secure Zone Transfers + +BIND 9 does not implement the zone transfer security mechanisms of +RFC2535 section 5.6, and we have no plans to implement them in the +future as we consider them inferior to the use of TSIG or SIG(0) to +ensure the integrity of zone transfers. + + +$Id: dnssec,v 1.16 2001/11/20 23:32:09 gson Exp $