From: Mark Andrews <marka@isc.org>
Date: Thu, 7 Feb 2002 03:50:14 +0000 (+0000)
Subject: pullup: Secure Zone Transfers note
X-Git-Tag: v9.2.0^2~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8db1db6295577b60e0ad32fd9c2589bf8e4d179c;p=thirdparty%2Fbind9.git

pullup: Secure Zone Transfers note
---

diff --git a/doc/misc/dnssec b/doc/misc/dnssec
index 4339bcd5787..2b3cbb0e1e1 100644
--- a/doc/misc/dnssec
+++ b/doc/misc/dnssec
@@ -80,4 +80,12 @@ an update occurs.  Advanced access control is possible using the
 "update-policy" statement in the zone definition.
 
 
-$Id: dnssec,v 1.14.2.1 2001/09/05 00:56:38 gson Exp $
+Secure Zone Transfers
+
+BIND 9 does not implement the zone transfer security mechanisms of
+RFC2535 section 5.6, and we have no plans to implement them in the
+future as we consider them inferior to the use of TSIG or SIG(0) to
+ensure the integrity of zone transfers.
+
+
+$Id: dnssec,v 1.14.2.2 2002/02/07 03:50:14 marka Exp $