[master] update README

diff --git a/README b/README
index bc32d67a8870b7fd55a70c969de177c03c5ac0df..abfbc58c56971070b5e6cb505bb9f1979344bbb4 100644 (file)
--- a/README
+++ b/README
@@ -60,9 +60,15 @@ BIND 9.10.0
           impact of reflection and amplification attacks, is
           always compiled in and no longer requires a compile-time
           option to enable it.
-        - A new zone file format, "map", allows zone data to be
-          stored in a format that can be mapped directly into memory,
-          allowing much faster zone loading.
+        - A new zone file format, "map", stores zone data in a
+          format that can be mapped directly into memory, allowing
+          significantly faster zone loading.
+        - "delve" (domain entity lookup and validation engine) is a
+          new tool with dig-like semantics for looking up DNS data
+          and performing internal DNSSEC validation.  This allows
+          easy validation in environments where the resolver may
+          not be trustworthy, and assists with troubleshooting of
+          DNSSEC problems.
         - Improved EDNS(0) processing for better resolver performance
           and reliability over slow or lossy connections.
         - Substantial improvement in response-policy zone (RPZ)
@@ -97,12 +103,12 @@ BIND 9.10.0
           instead of using a modified OpenSSL as an intermediary.
           This has been tested with the Thales nShield HSM and with
           SoftHSMv2 from the Open DNSSEC project.
-        - New 'dnssec-coverage' tool to check DNSSEC key coverage
+        - New "dnssec-coverage" tool to check DNSSEC key coverage
           for a zone and report if a lapse in signing coverage has
           been inadvertently scheduled.
         - Signing algorithm flexibility and other improvements
           for the "rndc" control channel.
-        - 'named-checkzone' and 'named-compilezone' can now read
+        - "named-checkzone" and "named-compilezone" can now read
           journal files, allowing them to process dynamic zones.
         - Multiple DLZ databases can now be configured.  Individual
           zones can be configured to be served from a specific DLZ
@@ -116,7 +122,7 @@ BIND 9.10.0
            for specific clients via the new "no-case-compress" ACL.
         - new "dnssec-importkey" command allows the use of offline
           DNSSEC keys with automatic DNSKEY management.
-        - New 'named-rrchecker' tool to verify the syntactic
+        - New "named-rrchecker" tool to verify the syntactic
           correctness of individual resource records.
         - When re-signing a zone, the new "dnssec-signzone -Q" option
           drops signatures from keys that are still published but are