dnsdist: Add #10157 to the upgrade guide and the 1.7.0-alpha1 ChangeLog

As suggested by Denis Machard on the mailing-list (thanks!).

diff --git a/pdns/dnsdistdist/docs/changelog.rst b/pdns/dnsdistdist/docs/changelog.rst
index ecc9109abd7dd006a8de376417698eca32184bf4..a00426d25f8870bcf82233ed707ecba6060f674a 100644 (file)
--- a/pdns/dnsdistdist/docs/changelog.rst
+++ b/pdns/dnsdistdist/docs/changelog.rst
@@ -5,6 +5,13 @@ Changelog
   :version: 1.7.0-alpha1
   :released: 23rd of September 2021
 
+  .. change::
+    :tags: Improvements
+    :pullreq: 10157
+    :tickets: 7937
+
+    Move to hashed passwords for the web interface
+
  .. change::
     :tags: Improvements
     :pullreq: 10381

diff --git a/pdns/dnsdistdist/docs/upgrade_guide.rst b/pdns/dnsdistdist/docs/upgrade_guide.rst
index a770666287bb603de2894e2befb7ae10340805f4..eb00fffddc6d42494a94e62999d0bab37056f77f 100644 (file)
--- a/pdns/dnsdistdist/docs/upgrade_guide.rst
+++ b/pdns/dnsdistdist/docs/upgrade_guide.rst
@@ -10,6 +10,8 @@ Truncated responses received over UDP for DoH clients will now be retried over T
 
 Unless set via :func:`setMaxTCPClientThreads` the number of TCP workers now defaults to 10, instead of the number of TCP binds.
 
+Plain-text API keys and passwords for web server authentication are now strongly discouraged. The :func:`hashPassword` method can be used to generate a hashed and salted version of passwords and API keys instead, so that the plain-text version can no longer be found in either the configuration file or the memory of the running process.
+
 1.5.x to 1.6.0
 --------------