bind9/doc/notes
Matthijs Mekking 6b5d7357df Detect NSEC3 salt collisions
When generating a new salt, compare it with the previous NSEC3
paremeters to ensure the new parameters are different from the
previous ones.

This moves the salt generation call from 'bin/named/*.s' to
'lib/dns/zone.c'. When setting new NSEC3 parameters, you can set a new
function parameter 'resalt' to enforce a new salt to be generated. A
new salt will also be generated if 'salt' is set to NULL.

Logging salt with zone context can now be done with 'dnssec_log',
removing the need for 'dns_nsec3_log_salt'.
2020-11-26 10:43:59 +01:00
..
notes-9.17.0.rst update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
notes-9.17.1.rst update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
notes-9.17.2.rst update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
notes-9.17.3.rst update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
notes-9.17.4.rst update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
notes-9.17.5.rst Fix 'deprected' typo 2020-09-21 11:26:52 +02:00
notes-9.17.6.rst Prepare release notes for BIND 9.17.6 2020-10-22 08:54:32 +02:00
notes-current.rst Detect NSEC3 salt collisions 2020-11-26 10:43:59 +01:00