Add changes and notes for kasp NSEC3 support

This feature is news worthy.

diff --git a/CHANGES b/CHANGES
index 8e616733072b1ef1315487964df218662b0ec5d9..18101e6c95db597c01897c01b5c456ddf83df548 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5538.  [func]          Add NSEC3 support for zones that manage DNSSEC with
+                       the 'dnssec-policy' configuration. A new option
+                       'nsec3param' can be used to set the NSEC3 parameters.
+                       [GL #1620]
+
 5537.  [func]          The query plugin mechanism has been extended
                        to support asynchronous operations. For example, a
                        plugin can now trigger recursion and resume

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index d0ea85715c615968168258a9d5cfce2d8210126e..4820e8cfb1f0b245204f3c4113838b8842a9d25e 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -60,6 +60,10 @@ Feature Changes
   certificate provided by the user or it can generate an ephemeral certificate
   on startup of the daemon.
 
+- Add NSEC3 support for zones that manage their DNSSEC with the `dnssec-policy`
+  configuration. A new option 'nsec3param' can be used to set the desired
+  NSEC3 parameters. [GL #1620].
+
 Bug Fixes
 ~~~~~~~~~