From: Ondřej Surý <ondrej@sury.org>
Date: Tue, 4 Dec 2018 16:32:33 +0000 (+0100)
Subject: Add release notes for RSAMD5 removal.
X-Git-Tag: v9.13.6~106^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=abe39991be64042f382e6c186835fa1b0fb99413;p=thirdparty%2Fbind9.git

Add release notes for RSAMD5 removal.
---

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index beb8ca1e17a..c871197efd3 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -445,6 +445,12 @@
 	  removed from BIND as the DSA key length is limited to 1024
 	  bits and this is not considered secure enough.
 	</para>
+	<para>
+	  Support for RSAMD5 algorithm has been removed freom BIND as the usage
+	  of the RSAMD5 algorithm for DNSSEC has been deprecated in RFC6725 and
+	  the security of MD5 algorithm has been compromised and the its usage
+	  is considered harmful.
+	</para>
       </listitem>
     </itemizedlist>
   </section>