Add changes and notes for kasp NSEC3 support

This feature is news worthy.

(cherry picked from commit 9adad77ac3e0799c1eac4591d9b941e320e955ce)

diff --git a/CHANGES b/CHANGES
index 5a65d2a815902919f3a6bdc669cc3a8df18f9b95..230d5ffcc5d8d5e4d542ee01199fd455ce4a5f6a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5538.  [func]          Add NSEC3 support for zones that manage DNSSEC with
+                       the 'dnssec-policy' configuration. A new option
+                       'nsec3param' can be used to set the NSEC3 parameters.
+                       [GL #1620]
+
 5534.  [bug]           The synthesised CNAME from a DNAME was incorrectly
                        followed when the QTYPE was CNAME or ANY. [GL #2280]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index f13fae1d97ac089f4fd6f3e434b0232a10df0534..3fe2bdb74725872650e013eaafacba2b1d6f41ee 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -36,6 +36,10 @@ Feature Changes
 
 - None.
 
+- Add NSEC3 support for zones that manage their DNSSEC with the `dnssec-policy`
+  configuration. A new option 'nsec3param' can be used to set the desired
+  NSEC3 parameters. [GL #1620].
+
 Bug Fixes
 ~~~~~~~~~