From: Mark Andrews <marka@isc.org>
Date: Wed, 21 Apr 2021 03:28:16 +0000 (+1000)
Subject: Add release note for [GL #2445]
X-Git-Tag: v9.17.13~31^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ad236976fc5cae7bd81a187af4df73b182b784de;p=thirdparty%2Fbind9.git

Add release note for [GL #2445]
---

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index ee9d54bde40..2d56a18ca9d 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,6 +40,9 @@ Feature Changes
 - Reduce the supported maximum number of iterations that can be
   configured in an NSEC3 zones to 150. :gl:`#2642`
 
+- Treat DNSSEC responses with NSEC3 iterations greater than 150 as insecure.
+  [GL #2445]
+
 Bug Fixes
 ~~~~~~~~~