add CHANGES

(cherry picked from commit ac28cc14e12b4a4c02f45176437bc53a3c38ac90)

diff --git a/CHANGES b/CHANGES
index f514eb0177fb5f5e2000891a86791ea47b3a2e4d..8b055e19eedd6e308ce348900958e0d1d24b0968 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5275.  [bug]           Mark DS records included in referral messages
+                       with trust level "pending" so that they can be
+                       validated and cached immediately, with no need to
+                       re-query. [GL #964]
+
 5274.  [bug]           Address potential use after free race when shutting
                        down rpz. [GL #1175]
 

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 9f5ba91667b27d565f3e5bbd6c22994cc2b1f0fa..399b70e64b2026e50b7a23f74a2c3838ee9e3a84 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -154,6 +154,13 @@
          algorithm and same Server Secret for the best performance.
        </para>
       </listitem>
+      <listitem>
+       <para>
+         DS records included in DNS referral messages can now be validated
+         and cached immediately, reducing the number of queries needed for
+         a DNSSEC validation. [GL #964]
+       </para>
+      </listitem>
     </itemizedlist>
   </section>