CHANGES, release note

diff --git a/CHANGES b/CHANGES
index 007e5d2e326eef739c5b61cfdd671910499e1dc0..b8cafb1958598ce60fae88bc642369d9613e9bd0 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5276.  [func]          DNSSEC Lookaside Validation (DLV) is now obsolete;
+                       all code enabling its use has been removed from the
+                       validator, "delv", and the DNSSEC tools. [GL #7]
+
 5275.  [bug]           Mark DS records included in referral messages
                        with trust level "pending" so that they can be
                        validated and cached immediately, with no need to

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 38b250662e42dfa658f1f8df0fb90632792361b2..231d6fa66ebbddd8e328e94a2d24490643e911cd 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -204,8 +204,13 @@
       </listitem>
       <listitem>
        <para>
-         The <command>dnssec-lookaside</command> option has been deprecated.
-         The feature still works, but it is discouraged to use it. [GL #7]
+         DNSSEC Lookaside Validation (DLV) is now obsolete.
+         The <command>dnssec-lookaside</command> option has been
+         marked as deprecated; when used in <filename>named.conf</filename>,
+         it will generate a warning but will otherwise be ignored.
+         All code enabling the use of lookaside validation has been removed
+         from the validator, <command>delv</command>, and the DNSSEC tools.
+         [GL #7]
        </para>
       </listitem>
     </itemizedlist>
@@ -216,9 +221,7 @@
       <listitem>
        <para>
          <command>named</command> will now log a warning if
-         a static key is configured for the root zone, or if
-         any key is configured for "dlv.isc.org", which has been shut
-         down. [GL #6]
+         a static key is configured for the root zone. [GL #6]
        </para>
       </listitem>
       <listitem>