Add release note and CHANGES for #2956

Feature change.

diff --git a/CHANGES b/CHANGES
index 335b035f517796cb5b6b9030ae032f97349af4fd..a9c9a4e85b9ecc32fecfb188fd042846b6aabf94 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5748.  [func]          Update "nsec3param" defaults to iterations 0, salt
+                       length 0. [GL #2956]
+
 5747.  [func]          Update rndc serve-stale status output to be less
                        confusing. [GL #2742]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index d6ff6c133db1397493a063d81d4b91a258593b94..37be6d1e5146f4a6f196c4b5da7665c4810f99c2 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -101,6 +101,9 @@ Feature Changes
   (``stale-cache-enable``), and whether returning of such data in responses is 
   enabled (``stale-answer-enable``). :gl:`#2742`
 
+- The default for ``dnssec-policy``'s ``nsec3param`` is changed to use
+  no extra iterations and no salt. :gl:`#2956`.
+
 Bug Fixes
 ~~~~~~~~~