From: Matthijs Mekking <matthijs@isc.org>
Date: Mon, 7 Nov 2022 13:47:33 +0000 (+0100)
Subject: Add CHANGES and release note for removed feature
X-Git-Tag: v9.19.8~51^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c7cae33cc345f172bb9153d35d1975aa0fd39a46;p=thirdparty%2Fbind9.git

Add CHANGES and release note for removed feature

Also mention that 'dnssec-secure-to-insecure' is obsoleted.
---

diff --git a/CHANGES b/CHANGES
index c39458f765e..59ed14a3f3f 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6023.	[func]		Remove dynamic update DNSSEC management feature.
+			[GL #3686]
+
 6022.	[performance]	The decompression implementation in dns_name_fromwire()
 			is now smaller and faster. [GL #3655]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 1dedc1b903d..8834c61db58 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -25,7 +25,10 @@ New Features
 Removed Features
 ~~~~~~~~~~~~~~~~
 
-- None.
+- Dynamic updates that add and remove DNSKEY and NSEC3PARAM records no
+  longer trigger key rollovers and denial of existence operations. This
+  also means that the option :any:`dnssec-secure-to-insecure` has been
+  obsoleted. :gl:`#3686`
 
 Feature Changes
 ~~~~~~~~~~~~~~~