From: Matthijs Mekking <matthijs@isc.org>
Date: Wed, 14 Oct 2020 08:10:01 +0000 (+0200)
Subject: Add changes and notes for kasp NSEC3 support
X-Git-Tag: v9.17.8~27^2~7
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9adad77ac3e0799c1eac4591d9b941e320e955ce;p=thirdparty%2Fbind9.git

Add changes and notes for kasp NSEC3 support

This feature is news worthy.
---

diff --git a/CHANGES b/CHANGES
index 8e616733072..18101e6c95d 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5538.	[func]		Add NSEC3 support for zones that manage DNSSEC with
+			the 'dnssec-policy' configuration. A new option
+			'nsec3param' can be used to set the NSEC3 parameters.
+			[GL #1620]
+
 5537.	[func]		The query plugin mechanism has been extended
 			to support asynchronous operations. For example, a
 			plugin can now trigger recursion and resume
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index d0ea85715c6..4820e8cfb1f 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -60,6 +60,10 @@ Feature Changes
   certificate provided by the user or it can generate an ephemeral certificate
   on startup of the daemon.
 
+- Add NSEC3 support for zones that manage their DNSSEC with the `dnssec-policy`
+  configuration. A new option 'nsec3param' can be used to set the desired
+  NSEC3 parameters. [GL #1620].
+
 Bug Fixes
 ~~~~~~~~~