]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Add note about removing DSA and DSA-NSEC3-SHA1 to release notes
authorOndřej Surý <ondrej@sury.org>
Wed, 6 Jun 2018 13:14:42 +0000 (15:14 +0200)
committerOndřej Surý <ondrej@sury.org>
Fri, 5 Oct 2018 09:16:13 +0000 (11:16 +0200)
doc/arm/notes.xml

index 15d3a56609641f7610851e9983aca0bc2b54030a..29839b35cf4c504bd3e330d9bd39c350cbbe3075 100644 (file)
          usually long after their end-of-life date and they are
          neither developed nor supported by their respective vendors.
        </para>
+       <para>
+         Support for DSA and DSA-NSEC3-SHA1 algorithms has been
+         removed from BIND as the DSA key length is limited to 1024
+         bits and this is not considered secure enough.
+       </para>
       </listitem>
     </itemizedlist>
   </section>