From f7b2ec32b43c385e56ec1cf8c788f82b648be072 Mon Sep 17 00:00:00 2001 From: Evan Hunt Date: Wed, 22 Mar 2023 15:06:58 -0700 Subject: [PATCH] CHANGES and release note for [GL #3953] (cherry picked from commit 8d80ee561ed087d3376919cd9239a53c46970995) --- CHANGES | 4 ++++ doc/notes/notes-current.rst | 10 ++++++++++ 2 files changed, 14 insertions(+) diff --git a/CHANGES b/CHANGES index 2770543be5..75cda85117 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,7 @@ +6126. [cleanup] Deprecate zone type "delegation-only" and the + "delegation-only" and "root-delegation-only" + options. [GL #3953] + 6125. [bug] Hold a catz reference while the update process is running, so that the catalog zone is not destroyed during shutdown until the update process is finished or diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 7267ffdd5d..6a63c53167 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -27,6 +27,16 @@ Removed Features - None. +- Zone type ``delegation-only``, and the ``delegation-only`` and + ``root-delegation-only`` options, have been deprecated; a warning will + be logged when they are used. + + These options were created to address the SiteFinder controversy, in + which certain top-level domains redirected misspelled queries to other + sites instead of returning NXDOMAIN responses. Since top-level domains are + now DNSSEC signed, and DNSSEC validation is active by default, the + options are no longer needed. :gl:`#3953` + Feature Changes ~~~~~~~~~~~~~~~