CHANGES and release note for [GL #3953]

diff --git a/CHANGES b/CHANGES
index 35c751348d5cb5fcb857beae789cb694a5aaf7f0..8c7240d58d437ebe6e48e3e9cb0a96349a0be4c3 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6126.  [cleanup]       Deprecate zone type "delegation-only" and the
+                       "delegation-only" and "root-delegation-only"
+                       options. [GL #3953]
+
 6125.  [bug]           Hold a catz reference while the update process is
                        running, so that the catalog zone is not destroyed
                        during shutdown until the update process is finished or

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index c4f6750e2e016b0236d7654a5b71feb2f124c95d..a106d8a0a10ff84f281635f29e2c288dfe8c5fd1 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -30,6 +30,16 @@ Removed Features
   using TKEY Mode 2 is now a fatal error.  Users are advised to switch to TKEY
   Mode 3 (GSS-API). :gl:`#3905`
 
+- Zone type ``delegation-only``, and the ``delegation-only`` and
+  ``root-delegation-only`` options, have been deprecated; a warning will
+  be logged when they are used.
+
+  These options were created to address the SiteFinder controversy, in
+  which certain top-level domains redirected misspelled queries to other
+  sites instead of returning NXDOMAIN responses. Since top-level domains are
+  now DNSSEC signed, and DNSSEC validation is active by default, the
+  options are no longer needed. :gl:`#3953`
+
 Feature Changes
 ~~~~~~~~~~~~~~~