upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-11 10:40:56 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/doc/arm
History
Ondřej Surý bd4576b3ce Remove TKEY Mode 2 (Diffie-Hellman) 
Completely remove the TKEY Mode 2 (Diffie-Hellman Exchanged Keying) from
BIND 9 (from named, named.conf and all the tools).  The TKEY usage is
fringe at best and in all known cases, GSSAPI is being used as it should.

The draft-eastlake-dnsop-rfc2930bis-tkey specifies that:

    4.2 Diffie-Hellman Exchanged Keying (Deprecated)

       The use of this mode (#2) is NOT RECOMMENDED for the following two
       reasons but the specification is still included in Appendix A in case
       an implementation is needed for compatibility with old TKEY
       implementations. See Section 4.6 on ECDH Exchanged Keying.

          The mixing function used does not meet current cryptographic
          standards because it uses MD5 [RFC6151].

          RSA keys must be excessively long to achieve levels of security
          required by current standards.

We might optionally implement Elliptic Curve Diffie-Hellman (ECDH) key
exchange mode 6 if the draft ever reaches the RFC status.  Meanwhile the
insecure DH mode needs to be removed.
2023-03-08 08:36:25 +01:00
..
_ext Support Sphinx 1.6.7 2022-07-21 15:21:21 +02:00
_static ARM style change: render literals in black color 2022-06-02 17:13:19 +02:00
.gitattributes make git aware XML docbooks are only asset ARM needs to track 2020-01-13 11:08:18 +01:00
.gitignore Convert the documentation to Sphinx documentation format 2020-05-07 16:02:56 +02:00
advanced.inc.rst Manually hyperlink algorithm, key, options, secret, and server 2022-07-04 15:50:52 +02:00
build.inc.rst Avoid libuv 1.35 and 1.36 that have broken recvmmsg implementation 2023-02-09 15:04:52 +01:00
catz.inc.rst Add tag and short description for catalog-zones statement 2022-07-29 18:56:04 +02:00
chapter1.rst Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
chapter2.rst Remove build from chapter 2 and move it to the end of ARM 2022-05-11 10:51:26 +02:00
chapter3.rst Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
chapter4.rst Split Configuration chapter in the ARM into chapters 3 and 4 2022-05-11 10:51:26 +02:00
chapter5.rst Move "DNSSEC" chapter before "Advanced" and "Security" 2022-06-22 13:37:18 +02:00
chapter6.rst Move "DNSSEC" chapter before "Advanced" and "Security" 2022-06-22 13:37:18 +02:00
chapter7.rst Move "DNSSEC" chapter before "Advanced" and "Security" 2022-06-22 13:37:18 +02:00
chapter9.rst Restructure includes for chapter 9 Troubleshooting 2022-05-11 10:51:26 +02:00
chapter10.rst Remove build from chapter 2 and move it to the end of ARM 2022-05-11 10:51:26 +02:00
conf.py remove /etc/bind.keys 2023-02-06 14:39:31 -08:00
config-auth.inc.rst Deduplicate link anchors in the ARM 2022-10-05 11:36:19 +02:00
config-intro.inc.rst Remove manually defined anchors pointing to statement definitions 2022-10-05 11:36:22 +02:00
config-resolve.inc.rst Remove manually defined anchors pointing to statement definitions 2022-10-05 11:36:22 +02:00
dlz.inc.rst Add tags and short descriptions for dlz and search statements 2022-07-29 18:56:04 +02:00
dns-ops.inc.rst Remove manually defined anchors pointing to statement definitions 2022-10-05 11:36:22 +02:00
dns-security-overview.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-security-overview.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-servers.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-servers.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-tree.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dns-tree.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
dnssec-guide.rst Minor DNSSEC guide tweaks 2022-05-11 10:51:26 +02:00
dnssec.inc.rst Remove dynamic update key management documentation 2022-11-18 11:04:17 +01:00
dyndb.inc.rst Add tag and short description for dyndb statement 2022-07-29 18:56:04 +02:00
general.rst Hyperlink program names to their manual pages 2022-03-14 10:46:36 +01:00
history.rst Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
index.rst Restructure includes for chapter 9 Troubleshooting 2022-05-11 10:51:26 +02:00
intro-dns-bind.inc.rst Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
intro-security.inc.rst Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
introduction.inc.rst Changed all references from clause to block 2022-06-24 08:12:52 +02:00
isc-logo.pdf Update ISC logo 2020-07-08 02:00:11 +00:00
logging-categories.inc.rst Remove links from logging category names 2022-07-04 15:50:51 +02:00
Makefile.am Remove auto-generated rst files in repo in favour of grammar pretty printer 2022-07-01 08:59:23 +02:00
managed-keys.inc.rst Grammar fixes and assorted text edits in the ARM 2022-07-04 15:50:51 +02:00
manpages.rst In the ARM appendix, sort man page sections alphabetically 2022-03-10 20:13:22 +01:00
name-resolution.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
name-resolution.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
notes.rst BIND 9.19.10 2023-02-16 13:38:33 +01:00
pkcs11.inc.rst Replace "sha1sum" with "openssl sha1 -r" 2022-11-14 19:54:42 +00:00
platforms.inc.rst Add FreeBSD 12.4 2023-02-24 13:40:30 +01:00
plugins.inc.rst Add short description for plugin statement 2022-07-29 18:56:04 +02:00
primary-secondary.dia Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
primary-secondary.png Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
recursive-query.dia Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
recursive-query.png Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
reference.rst Remove TKEY Mode 2 (Diffie-Hellman) 2023-03-08 08:36:25 +01:00
requirements.inc.rst Deduplicate link anchors in the ARM 2022-10-05 11:36:19 +02:00
requirements.txt Bump Sphinx version to 5.3.0 2022-10-24 11:05:02 +02:00
resolver-forward.dia Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
resolver-forward.png Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
rpz.inc.rst Update RPZ documentation 2022-08-29 14:04:03 +00:00
security.inc.rst Add hyperlinks to all unique statement names 2022-07-04 15:50:50 +02:00
sig0.inc.rst Split chapter Advanced DNS Features in the ARM into chapters 5, 6, 7 2022-05-11 10:51:26 +02:00
tkey.inc.rst Split chapter Advanced DNS Features in the ARM into chapters 5, 6, 7 2022-05-11 10:51:26 +02:00
troubleshooting.inc.rst Remove manually defined anchors pointing to statement definitions 2022-10-05 11:36:22 +02:00
tsig.inc.rst Manually hyperlink algorithm, key, options, secret, and server 2022-07-04 15:50:52 +02:00
zones.inc.rst Remove manually defined anchors pointing to statement definitions 2022-10-05 11:36:22 +02:00