And changelog entry.

git-svn-id: file:///svn/unbound/trunk@444 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 4cf0fd813b6d5195b51699c155f17125d2bd69c1..cdf230eb15082721e8b8836baf023b3f614f50cc 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,5 +1,10 @@
 20 July 2007: Wouter
        - Check CNAME chain before returning cache entry with CNAMEs.
+       - Option harden-glue, default is on. It will discard out of zone
+         data. If disabled, performance is faster, but spoofing attempts
+         become a possibility. Note that still normalize scrubbing is done,
+         and that the potentially spoofed data is used for infrastructure
+         and not returned to the client.
 
 19 July 2007: Wouter
        - shuffle NS selection when getting nameserver target addresses.