add new feature list to README

diff --git a/README b/README
index a1fd6b27630a67631c1573b2b40040dfa66ee7c1..3399798f1d64ac659782675b6b99b3c8c5cecb6d 100644 (file)
--- a/README
+++ b/README
@@ -99,11 +99,19 @@ format-patch.
 
 BIND 9.13 features
 
-BIND 9.13.0 is the newest development branch of BIND 9. It includes a
-number of changes from BIND 9.12 and earlier releases. New features
-include:
-
-  * TBD
+BIND 9.13 is the newest development branch of BIND 9. It includes a number
+of changes from BIND 9.12 and earlier releases. New features include:
+
+  * Support for IDNA2008 when linking with libidn2.
+  * "Root key sentinel" support, enabling validating resolvers to indicate
+    via a special query which trust anchors are configured for the root
+    zone.
+
+In addition, cryptographic support has been modernized. BIND now uses the
+best available pseudo-random number generator for the platform on which
+it's built. Very old versions of OpenSSL are no longer supported.
+Cryptography is now mandatory; building BIND without DNSSEC is now longer
+supported.
 
 Building BIND
 

diff --git a/README.md b/README.md
index 8b91dd9310add11efd4322c1e75b73f8511cb9df..287dabacdf1ac81c7333cc7cd966e01f77f1e296 100644 (file)
--- a/README.md
+++ b/README.md
@@ -116,11 +116,19 @@ including your patch as an attachment, preferably generated by
 
 ### <a name="features"/> BIND 9.13 features
 
-BIND 9.13.0 is the newest development branch of BIND 9. It includes a
+BIND 9.13 is the newest development branch of BIND 9. It includes a
 number of changes from BIND 9.12 and earlier releases.  New features
 include:
 
-* TBD
+* Support for IDNA2008 when linking with `libidn2`.
+* "Root key sentinel" support, enabling validating resolvers to indicate
+  via a special query which trust anchors are configured for the root zone.
+
+In addition, cryptographic support has been modernized. BIND now uses the
+best available pseudo-random number generator for the platform on which
+it's built. Very old versions of OpenSSL are no longer supported.
+Cryptography is now mandatory; building BIND without DNSSEC is now
+longer supported.
 
 ### <a name="build"/> Building BIND
 

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 56007eae0c47364a8e5bbc953600266d5ead11df..a50a4f9ce17775e72bed1876e02d816adb815755 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -84,7 +84,7 @@
       <listitem>
        <para>
          <command>named</command> now supports the "root key sentinel"
-         mechanism. This enables validating resolvers to indicate to
+         mechanism. This enables validating resolvers to indicate
          which trust anchors are configured for the root, so that
          information about root key rollover status can be gathered.
          To disable this feature, add