From: Evan Hunt <each@isc.org>
Date: Tue, 6 Aug 2019 16:44:17 +0000 (-0700)
Subject: CHANGES, release note
X-Git-Tag: v9.15.3~3^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d7461772bb103010aa5a2ea953200f3eecab5054;p=thirdparty%2Fbind9.git

CHANGES, release note
---

diff --git a/CHANGES b/CHANGES
index 007e5d2e326..b8cafb19585 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5276.	[func]		DNSSEC Lookaside Validation (DLV) is now obsolete;
+			all code enabling its use has been removed from the
+			validator, "delv", and the DNSSEC tools. [GL #7]
+
 5275.	[bug]		Mark DS records included in referral messages
 			with trust level "pending" so that they can be
 			validated and cached immediately, with no need to
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 38b250662e4..231d6fa66eb 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -204,8 +204,13 @@
       </listitem>
       <listitem>
 	<para>
-	  The <command>dnssec-lookaside</command> option has been deprecated.
-	  The feature still works, but it is discouraged to use it. [GL #7]
+	  DNSSEC Lookaside Validation (DLV) is now obsolete.
+	  The <command>dnssec-lookaside</command> option has been
+	  marked as deprecated; when used in <filename>named.conf</filename>,
+	  it will generate a warning but will otherwise be ignored.
+	  All code enabling the use of lookaside validation has been removed
+	  from the validator, <command>delv</command>, and the DNSSEC tools.
+	  [GL #7]
 	</para>
       </listitem>
     </itemizedlist>
@@ -216,9 +221,7 @@
       <listitem>
  	<para>
  	  <command>named</command> will now log a warning if
-	  a static key is configured for the root zone, or if
-	  any key is configured for "dlv.isc.org", which has been shut
-	  down. [GL #6]
+	  a static key is configured for the root zone. [GL #6]
 	</para>
       </listitem>
       <listitem>