Feature Changes
~~~~~~~~~~~~~~~
-- Some more ``dnssec-policy`` configuration checks have been added to
- detect weird policies such as missing KSK and/or ZSK, and too short
- key lifetimes and re-sign periods. :gl:`#1611`.
+- New ``dnssec-policy`` configuration checks have been added to detect
+ unusual policies, such as missing KSK and/or ZSK and too-short key
+ lifetimes and re-sign periods. :gl:`#1611`
Bug Fixes
~~~~~~~~~
-- Key files were updated every time the ``dnssec-policy`` key manager ran,
- whether the metadata has changed or not. BIND now checks if changes were
- applied before writing out the key files. :gl:`#3302`.
+- Key files were updated every time the ``dnssec-policy`` key manager
+ ran, whether the metadata had changed or not. :iscman:`named` now
+ checks whether changes were applied before writing out the key files.
+ :gl:`#3302`
- DNSSEC-signed catalog zones were not being processed correctly. This
- has been fixed. :gl:`#3380`.
+ has been fixed. :gl:`#3380`